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long  delays  in  delivery.  Controller  sensors,  which  include  limit  switches  and  interlocks, 
were  subject  to  the  same  problems  of  variety  and  obsolescence  as  the  control  systems.  The 
weapons  elevator  RDT&E  program  was  set  up  to  address  and  attempt  to  correct  this  problem 
area.  The  review  phase  of  the  program  addressed  by  the  present  report  evaluates  the  state  of  the 
art  of  elevator  controllers  and  sensors  existing  and  at  conceptual  design  levels.  The  review 
includes  Navy  and  commercial  marine  freight  and  passenger  elevators  and  records  discussions  made 
at  manufacturer’s  plants  and  during  visits  to  U.S.  Navy  ships.  Evaluation  criteria  used  in  rating 
alternatives  included  maintainability,  long-term  availability,  multiple  sources  of  components, 
reliability,  maintenance  and  operator  training  requirements,  human-interface  and  trouble  shooting, 
initial  cost,  the  effects  of  injecting  new  technology  through  overhauls  during  the  ship  life,  fail¬ 
safe  operation,  and  standardization.  The  conclusion  of  the  review  was  that  elevator  manufact¬ 
urers  in  general  have  motives  in  design  and  construction  of  elevator  controller/sensor  packages 
that  sometimes  run  contrary  to  naval  elevator  requirements.  Often  early  obsolescence  is  designed 
into  the  product>ATechnologies  are  used  which  require  high  skill  levels  for  servicing  which  can 
be  jgiowded''only by  the  manufacturer.  Patented  or  proprietary  circuits  or  manufacturing  methods 
are'  used  that  limit  flexibility  between  sources  for  replacement  components.  Controllers  were 
considered  using  relay  logic,  standard  logic  and  programmable  microprocessors.  The  conclusion 
is  reached  that  further  design  studies  should  concentrate  on  controllers  using  solid-state 
relay  logic.  Sensors  considered  included  optical,  eddy-current,  variable  reluctance,  Hall-effect, 
and  other  magnetics.  The  conclusion  is  reached  that  sensors  that  will  best  withstand  the  hazards 
of  shipboard  use  including  painting,  electromagnetic  interference,  physical  abuse,  marine 
environment,  and  operation  in  explosive  atmospheres  should  use  d-c  magnetic  flux  as  the  physical 
property  to  be  detected.  The  review  also  includes  an  analysis  of  the  requirement  for  explosion¬ 
proofing  of  elevator  controller/sensor  electrical  circuits.  The  recommendation  is  made  that  all 
circuits  entering  hazardous  areas  such  as  those  that  may  be  subject  to  the  accidental  discharge 
of  aviation  gasoline  or  used  for  the  stowage  of  hypsrgolic  fueled  missiles,  should  first  pass 
through  intrinsic  safety  barriers  limiting  electric  current  and  voltage  to  safe  levels  based  upon  the 
particular  hazard  being  designed  against.  A  Military  Standard  on  intrinsic  safety  electronics  does 
not  yet  exist  and  it  is  recommended  that  this  standard  be  completed  external  to  this  program. 
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NAVY  SHIPBOARD  CARGO  AND  WEAPONS  ELEVATOR  CONTROLLER 
AND  SENSOR  SUBSYSTEM  PROBLEM  ANALYSIS 


BACKGROUND 

Navy  shipboard  cargo  and  weapons  elevator  controller  and  sensor  subsystems  are  critical  areas 
which  have  attracted  considerable  attention  due  to  numerous  problems  of  fleet  maintenance  support. 
In  1973  a  conference  was  convened  at  the  Naval  Sea  Systems  Command  Headquarters  to  discuss 
casualty  reports  on  various  elevators  in  underway  replenishment  ships. 

Elevator  controller  systems  now  in  use  on  Navy  ships  are  of  many  different  designs  and  vintages, 
and  are  supplied  by  a  variety  of  manufacturers.  Some  of  these  control  systems  are  obsolete  in  terms  of 
vendors,  current  pnduct  lines,  and  replacement  components.  Replacement  parts  are  procured  from 
sole  source  suppliers  at  high  cost  with  attendant  long  delays  in  delivery.  There  is  little  or  no  Navy  con¬ 
trol  of  quality  and  no  standardization  or  interchangeability  among  manufacturers. 

This  large  variety  of  control  systems  and  the  apparent  overcomplexity  of  some  designs  have 
resulted  in  poor  performance  in  terms  of  parts  support  and  documentation,  and  in  training  maintenance 
and  operational  personnel. 

Closely  related  to  the  elevator  control  systems  are  the  "sensors."  These  devices  are  the  limit 
switches  and  interlocks  of  either  mechanical  contactor  or  static  proximity  types  that  sense  such  func¬ 
tions  as  whether  doors  or  hatches  have  been  closed,  whether  levels  have  been  reached,  or  whether 
automatic  platform-locking  bars  are  engaged.  The  second  part  of  the  sensor  is  the  actuation  device 
used  to  actuate  the  switch.  Variety  and  obsolescence  are  major  problems  in  sensors  just  as  they  are  in 
the  control  system.  Malfunctions  of  sensors  are  a  heavy  contributor  to  the  casualty  rate  of  some  ship¬ 
board  elevators. 

In  1977  a  second  conference  convened  at  the  Naval  Sea  Systems  Command  revealed  that, 
although  much  progress  had  been  made,  many  of  the  problems  remained.  In  order  to  take  a  fresh  look 
at  the  issues,  the  Naval  Sea  Systems  Command,  in  1979,  developed  a  cargo  and  weapons  elevator  sys¬ 
tems  research,  development,  testing  and  evaluation  program  plan.  One  task  under  the  plan  addressed 
the  controller  and  sensor  subsystems.  The  present  report,  addressing  the  subject  of  problem  analysis,  is 
the  first  of  a  series  that  will  eventually  cover  design  studies,  hardware  specification,  prototype  fabrica¬ 
tion,  prototype  shore  testing,  and  shipboard  testing. 

Development  of  the  RDT&E  plan  in  controller  and  sensor  subsystems  benefited  greatly  from  an 
ad  hoc  study  performed  by  R.  Cox  of  the  Naval  Research  Laboratory,  [11.  This  study,  which  was 
funded  by  the  Naval  Sea  Systems  Command  (PERA  CV)  at  Puget  Sound  Naval  Shipyard,  addressed  the 
subject  of  controllers  and  sensors  used  in  the  Improved  Weapons  Handling  System  elevators  aboard  air¬ 
craft  carriers  CV  59  through  CV  64.  It  was  determined  that  a  controller  based  on  electromechanical 
relays  rated  highest  against  practically  all  criteria  standards.  It  did  not  rate  highest  in  regard  to  failsafe 
operation,  but  had  a  respectable  rating.  The  unexpectedly  high  rating  in  regard  to  reliability  was  due  to 
the  light  usage  factor  of  weapons  elevators.  Relay  controllers,  on  the  other  hand,  have  been  demon¬ 
strated  to  be  highly  maintainable  by  assigned  maintenance  personnel.  One  disadvantage  of  electro¬ 
mechanical  relays  is  in  the  area  of  underwater  shock.  While  relays  can  readily  be  designed  to  function 
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properly  following  a  shock  wave,  most  relays  have  unbalanced  mass  contactors  that  will  change  state  as 
the  shockwave  passes.  Controllers  that  require  manual  intervention  following  the  passage  of  a  shock 
wave  are,  however,  presently  accepted  in  construction  specifications  so  long  as  fail-safe  provisions 
apply. 

INTRODUCTION 

The  objectives  of  the  task  of  which  this  report  represents  Phase  I  are  to  bring  fleet-installed  eleva¬ 
tors  to  a  more  acceptable  level  of  performance  and  effectiveness  through  the  development  of  standard 
Navy  elevator  control  systems  technology  and  to  produce  guidelines  for  acceptable  practices  in  the 
design,  selection,  and  application  of  sensors  to  be  used  with  the  control  system.  The  two  elements  of 
controller  and  sensor  are  combined  for  the  purpose  of  this  development  due  to  the  influence  each  part 
has  on  the  design  and  performance  of  the  other.  It  is  the  objective  to  address  cargo  and  weapons  eleva¬ 
tors  on  all  classes  of  U.S.  Navy  ships.  The  task’s  near-term  objective  will  be  to  improve  the  667  eleva¬ 
tors  presently  installed  in  operational  ships.  Far-term  objectives  afford  a  development  of  guidance  on 
major  conversions  involving  new  or  greatly  modified  elevators  and  for  new  contruction  ships.  It  was 
determined  that  the  review  phase  of  this  work  covered  by  this  report  should  include  a  study  of  control 
and  sensor  systems  and  devices  in  use  in  Navy  and  commercial  or  industrial  applications  for  elevators, 
conveyors,  hoisting  machinery,  and  similar  systems.  Coverage  of  the  complete  range  of  technology 
sophistication  from  basic  relay  logic  to  reprogrammable  micro-processor  systems  was  attempted.  The 
range  of  sensors  examined  included  mechanical  limit  switches,  fiber  optics,  light  and  infra-red  emitting 
diodes,  magnetic  reeds.  Hall-effect,  variable  reluctance,  eddy  current  and  other  proximity  switches.  A 
ranking  of  the  systems,  sensors,  and  components  was  made  that  appeared  most  suitable  for  elevators 
and  conclusions  were  reached  for  entering  the  second  phase  of  the  development,  namely  the  design 
study  period. 

The  investigation  is  an  attempt  to  review  the  state  of  the  art  of  elevator  controllers  and  sensors 
both  at  existing  and  concept  design  levels.  The  review  includes  marine  freight  and  passenger  elevators. 
Manually  controlled  man-riding  elevators  were  also  considered  versus  automatic  dispatched  type  eleva¬ 
tors.  A  special  study  conducted  along  with  the  controller  and  sensor  work  involved  the  analysis  of  the 
requirement  for  explosion  proofing  elevator  electronic  circuits  on  ships  which  store  aviation  gasoline. 
An  abbreviated  list  of  organizations,  ships,  and  personnel  contacted  in  connection  with  the  survey  is 
given  in  Appendix  A. 


SUMMARY  OF  RESULTS 

The  review  phase  of  the  program  addressed  by  the  present  report  evaluates  the  state  of  the  art  of 
elevator  controllers  and  sensors  existing  and  at  conceptual  design  levels.  The  review  includes  Navy  and 
commercial  marine  freight  and  passenger  elevators  and  records  discussions  made  at  manufacturers’ 
plants  and  during  visits  to  US  Navy  ships.  Evaluation  criteria  used  in  rating  alternatives  included  main¬ 
tainability,  long-term  availability,  multiple  sources  of  components,  reliability,  maintenance  and  operator 
training  requirements,  human-interface  and  trouble  shooting,  initial  cost,  the  effects  of  injecting  new 
technology  through  overhauls  during  the  ship  life,  failsafe  operation,  and  standardization.  The  conclu¬ 
sion  of  the  review  was  that  elevator  manufacturers  in  general  have  motives  in  design  and  construction 
of  elevator  controller/sensor  packages  which  sometimes  run  contrary  to  naval  elevator  requirments. 
Often  early  obsolescence  is  designed  into  the  product.  Technologies  are  used  which  require  high  skill 
levels  for  servicing  which  can  be  provided  only  by  the  manufacturer.  Patented  or  proprietary  circuits  or 
manufacturing  methods  are  often  used  which  limit  flexibility  between  sources  for  replacement  com¬ 
ponents.  Controllers  were  considered  using  relay  logic,  standard  logic  and  programmable  microproces¬ 
sors.  The  conclusion  is  reached  that  further  design  studies  should  concentrate  on  controllers  using 
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solid-state  relay  logic.  Sensors  considered  included  optical,  eddy-current,  variable  reluctance.  Hail- 
effect,  and  other  magnetics.  The  conclusion  is  reached  that  sensors  which  will  best  withstand  the 
hazards  of  shipboard  use  including  painting,  electromagnetic  interference,  physical  abuse,  marine 
environment  and  operation  in  explosive  atmospheres,  should  use  d-c  magnetic  flux  as  the  physical  pro¬ 
perty  to  be  detected.  The  review  also  includes  an  analysis  of  the  requirment  for  explosion-proofing  of 
elevator  controller/sensor  electrical  circuits.  The  recommendation  is  made  that  all  circuits  entering 
hazardous  areas  such  as  those  which  may  be  subject  to  the  accidental  discharge  of  aviation  gasoline  or 
used  for  the  stowage  of  hypergolic  fueled  missiles,  should  first  pass  through  intrinsic  safety  barriers  lim¬ 
iting  electric  current  and  voltage  to  safe  levels  based  upon  the  particular  hazard  being  designed  against. 
A  Military  Standard  on  intrinsic  safety  electronics  does  not  yet  exist,  and  it  is  recommended  that  a  stan¬ 
dard  be  completed  external  to  this  program. 

SPECIFICATION  REQUIREMENTS 

Weapons  elevator  controller/sensor  systems  are  procured  to  a  variety  of  military  specifications  and 
standards.  A  listing  of  the  most  significant  of  these  is  given  in  Table  1.  Since  it  will  be  necessary  to 
refer  back  to  these  documents  which  form  boundary  values  to  the  problem,  a  summary  of  key  provi¬ 
sions  of  articles  in  the  most  significant  specifications  is  given  in  Appendix  B. 

Reliability  calculations  in  this  report  are  based  on  the  parts-count  method  described  in  Military 
Standardization  Handbook  MIL-HDBK-217C.  An  extract  from  this  handbook  describing  the  parts- 
count  reliability  procedure  is  included  as  Appendix  C.  The  parts-count  method  was  regarded  as  most 
applicable  for  calculating  reliability  both  in  the  early  stages  of  elevator  controller  design  and  for  qualita¬ 
tive  evaluation  of  existing  controllers. 

Elevator  specifications  were  reviewed  for  Navy  auxiliary  ships  AD40,  AD41,  AE21.  AE26,  and 
AOE3. 

It  was  found  that  platform  speeds  varied  between  18  m/min  (60  ft/min)  and  45  m/min  (150 
ft/ min).  Platform  working  loads  ranged  between  3600  and  5400  kg  (8  000  and  12  000  lb).  All  eleva¬ 
tors  were  two-speed  with  levelling  speed  equal  to  1/6  full  speed.  Some  elevators  were  automatic  "send” 
only  while  others  included  a  "calf  feature. 

One  specification  included  a  continuous  repetition  duty  cycle  with  full  load  of  not  less  than  40 
round  trips  per  hour  between  the  main  deck  and  the  lowest  terminal  stopping  24  seconds  at  each  end  of 
travel.  Total  lifetime  endurance  was  not  mentioned. 

Proximity  and  limit  switches  were  required  to  have  a  sensing  range  from  0.3  to  1.25  cm  (1/8  in. 
to  1/2  in.)  from  the  face  of  the  sensing  plate  and  on-off  hysteresis  of  less  than  0.3  cm.  Repeatability 
should  be  better  than  ±0.8  mm  (±  1/32  in.). 

Since  elevator  controllers  on  aricraft  carriers  are  so  important  to  this  review,  an  abstract  was  made 
and  is  presented  as  Appendix  D  of  the  elevator  controller  section  of  a  modification  specification  for  the 
USS  AMERICA  (CVA-66).  Reference  to  this  specification  summary  will  show  the  problem  as 
presented  to  the  elevator  controller  contractors. 

TRAINING  REQUIREMENTS 

Guidelines  for  this  study  directed  that  the  maintenance  level  of  training  for  elevator  controllers 
and  sensors  should  be  directed  at  Electricians  Mate  ratings  2  and  3  (EM2  and  EM3).  Certain  of  the 
building  specifications  for  shipboard  elevators  also  specify  that  planned  maintenance  and  repair  person¬ 
nel  ability  level  should  be  that  of  Electricians  Mate  third  class.  (See  Appendix  D.)  Duties  of  this  rate 
are  described  in  the  Navy  Enlisted  Manpower  and  Personnel  Classification  Manual  [2J. 
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Table  1  —  Military  Specifications,  Standards  and  Handbooks 
Used  for  Weapons  Elevator  Controller/Sensor  Procurement 


Spec/Std  # 

Tide 

MIL-C-915 

Cable  and  Cord,  Electrical,  for  Shipboard  Use-  General  Spec,  for 

MIL-C-2212E  (SHIPS) 

Controllers,  Electric  Motor,  AC  or  DC  and  Associated 

Switching  Devices,  Naval  Shipboard 

MIL-E-16400G  (Navy) 

Electronic,  Interior  Communication,  and  Navigation 

Equipment  Naval  Ship  and  Shore 

MIL-E-17807B  (SH) 

Elevator,  Weapon  and  Cargo,  Electromechanical  (Shipboard) 

MIL-H-46S55A 

Human  Engineering  Requirements  for  Military  Systems, 
Equipment  and  Facilities 

MIL-M-28787 

Modules,  Electronic,  Standard  Electronic  Modules  Program- 
General  Specification  for 

M1L-M-38510 

Microcircuits-General  Specification  for 

MIL-N-28787A 

Standard  Electronic  Modules  Program-General  Specification  for 

MIL-R-19523A  (SHIPS) 

Relays,  Control.  Naval  Shipboard 

MIL-R-28750A 

Relay,  Solid  State-General  Specification  for 

MIL-S-901 

Shock  Tests  (High-Impact)  Shipboard  Machinery,  Equipment 
and  Systems-  Requirements  for 

MIL-STD-167-1  (SHIPS) 

Mechanical  Vibrations  of  Shipboard  Equipment  Type  1 
Environmental 

MIL-STD-756A 

Reliability  Prediction 

MIL-STD-1 130A 

Connections.  Electrical.  Solderless  Wrap 

MIL-STD- 1346A 

Relays  Selection  and  Application 

MIL-STD-1378D 

Requirements  for  Employing  Standard  Electronic  Modules 

MIL-STD- I389A 

Design  Requirements  for  Standard  Electronic  Modules 

MIL-STD-I66S 

Test  Equipment  for  the  Standard  Electronic  Modules 

Program 

MIL-HDBK-217C 

MIL-HDBK-246 

Military  Standardization  Handbook  Reliability 

Prediction  of  Electronic  Equipment 

Program  Managers  Guide  for  the  Standard  Electronic 

Modules  Program 

MIL-HDBK-246 


Program  Managers  Guide  Tor  the  Standard  Electronic 
Modules  Program 
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Detailed  training  requirements  for  EM2  and  EM3  are  given  in  the  Electricians  Mate  Rate  Training 
Manual  [3]. 

Electricians  Mates  2  and  3  are  required  to  be  familiar  with  electromechanical  relays  and  relay  con- 
ttollers  and  also  be  able  to  read  electronic  and  logic  circuits  and  semiconductor  circuitry.  Eight  pages  in 
the  training  manual  are  dedicated  to  logic  instruction.  The  ratings  learn  logic  symbols  (nand,  nor,  and, 
or),  truth  tables,  gates,  inhibit,  flip-flops,  multivibrators,  Schmidt-triggers,  pulsers,  steppers,  amplifiers, 
etc. 


For  this  instruction  the  Electricians  Mates  attend  EM  Class  A  school.  This  is  a  6-week  school 
where  they  spend  4  days  on  AC  controllers,  2  days  on  logic  and  I  day  on  elevators.  There  is  also  an  8- 
week  EM  school  where  6  days  are  spent  on  AC/DC  controllers.  3  days  on  logic  and  1/2  day  on  elevator 
operation  and  test. 

The  computerized  job  descriptions  of  Electricians  Mate  ratings  show  that  the  EM3  performs  438 
different  tasks.  About  10%  of  the  population  works  on  elevator  control  systems  for  a  total  of  about  5% 
of  its  time.  This  does  not  include  regular  maintenance  of  elevator  side  doors,  elevator  locks,  etc.  A 
total  of  379  different  tasks  are  performed  by  EM2  ratings  with  about  16%  of  the  population  working  on 
elevators  (excluding  cleaning  and  lubrication)  for  a  total  of  7%  of  their  time.  (These  figures  are  for 
CV59-62-63-64). 

Discussions  with  personnel  at  the  Naval  Training  Center,  Great  Lakes  indicated  that  during  the  A 
school,  ratings  see  a  Cutler  Hammer  controller  but  nothing  more.  After  two  years  in  the  fleet  when 
ratings  re-enlist,  they  often  elect  as  a  re-enlistment  incentive  to  go  to  the  18-week  EM  Class  C-7 
school.  Attendance  at  this  school  does  not  necessarily  change  their  rating  but  of  those  EMs  aboard 
ships  who  were  interviewed  and  had  taken  this  course  none  were  found  to  be  working  at  the  detailed 
level  of  maintenance  on  elevator  controllers. 

During  the  18-week  C-7  school,  7  days  are  spent  on  logic,  about  the  same  on  transistors,  and  I 
week  specifically  on  the  Cutler  Hammer  controller.  Two  days  are  spent  on  the  elevator  theory  and  the 
rest  in  hands-on  training  and  trouble-shooting  bad  cards. 

There  is  also  a  26-week  school  where  somewhat  more  time  is  spent  on  AC  and  DC  controllers. 

At  the  Naval  Training  Center,  Great  Lakes,  there  are  trainers  for  the  PDP-14,  Cutler  Hammer, 
and  General  Electric  (GE)  controllers.  The  GE  controller  is  not  taught  any  longer.  The  PDP-14  con¬ 
troller  is  covered  only  in  a  special  two  week  ROM/ENCODER  School. 

About  nine  students  attend  the  ROM/ENCODER  School  per  year.  During  the  course,  about  1 
day  is  devoted  to  studying  the  encoder  and  diode  matrix.  The  balance  is  spent  on  the  PDP-14  con¬ 
troller.  hoisting  machinery,  and  safety  devices. 

One  other  solution  to  sophisticated  elevator  controller  maintenance  is  to  use  different 
classifications  of  rating  on  different  parts  of  the  controller.  Possible  maintenance  personnel  [2)  include 
Electronics  Technician  (radar).  Electronics  Technician  (communication).  Data  Systems  Technician 
Basic,  Electricians  Mate  Basic,  and  Aviation  Electricians  Mate  Basic. 

Electronics  Technicians  2  and  3  (4)  are  specialists  in  either  communications  or  radar.  The  radar 
people  learn  about  radar  and  navigational  systems  such  as  inertial,  Loran  and  satellite  navigators.  The 
communications  training  is  almost  all  analog  in  CW  and  voice  communication,  fleet  multichannel 
broadcasting,  facsimile  systems,  etc. 
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Data  Systems  Technicians  are  capable  of  locating  defective  parts  within  electronic  circuits.  They 
can  insert  and  monitor  diagnostic  programs  in  digital  and  analog  equipment  and  record  results.  They 
can  diagnose  malfunctions  of  digital  data  equipment  by  analyzing  the  operation. 

Variables  in  the  maintenance  personnel  equation  are  (a)  the  rate  classification  of  the  individual 
performing  the  maintenance,  (b)  the  training  level  of  the  maintenance  technician  and  (c)  the  ship 
department  responsible  for  the  maintenance. 

Since  EM2  and  3  ratings  spend  so  little  of  their  time  on  elevator  controllers,  highly  specialized 
and  sophisticated  electronics  training,  just  focused  on  these  tasks,  is  considered  unjustifiable.  In  all 
likelihood  the  training  would  be  forgotten  by  the  time  it  was  put  to  use. 

A  mixture  of  ET  and  EM  ratings  in  the  repair  and  maintenance  of  elevator  controllers  was  tried 
for  a  short  time  aboard  one  aircraft  carrier.  What  was  found  here  was  that  the  EM  considered  the 
source  of  the  trouble  to  be  in  the  controller  maintained  by  the  ET  while  the  ET  was  sure  that  the 
source  of  the  trouble  was  in  the  sensors  and  interlocks  which  were  maintained  by  the  EM.  It  is  recom¬ 
mended  that  responsibility  for  maintaining  and  repairing  elevators  be  placed  on  the  shoulders  of  a  sin¬ 
gle  rate  classification. 

During  visits  to  aircraft  carriers  it  was  found  that  in  some  cases  the  weapons  elevators  were  under 
the  control  of  the  aviation  systems  department  while  on  others  they  came  under  the  hull  department. 
The  department  responsible  for  performing  maintanance  work  on  elevators  did  not  seem  to  affect  the 
system  performance  and  availability. 

It  is  recommended  that  shipboard  elevator  systems  should  continue  to  be  maintained  by  Electri¬ 
cians  Mate  Ratings  EM2  and  EM3.  These  ratings  are  given  no  training  on  computer  or  microprocessor 
address  or  data-bus  type  dynamic  logic  systems.  They  also  receive  very  little  training  on  static-logic  sys¬ 
tems  maintenance  and  only  then  using  simple  circuits  such  as  'nand'  and  ‘nor'  logic.  Taking  these 
qualifications  as  the  base  line  for  new  elevator  controller  systems.  Electricians  Mates  should  not  be 
asked  to  replace  as  part  of  their  maintenance  duties,  modules  which  belong  to  another  technology  of 
which  they  have  no  understanding.  Such  modules  might  be  multiphase  computer  system  clocks. 
RAM/ROM  memory  units,  tri-state  buffers  etc.  When  maintenance  is  performed  by  numbers  instead 
of  with  complete  understanding  of  the  functioning  of  the  system,  the  maintenance  personnel  become 
nervous  and  suspicious.  When  problems  occur,  they  immediately  suspect  the  black  box  rather  than  that 
part  of  the  circuitry  that  they  understand. 

A  comparison  between  system  complexity  aboard  US  naval  ships  and  naval  vessels  of  the  USSR 
uncovered  some  revealing  facts.  On  Russian  ships,  systems  are  kept  just  as  simple  to  maintain  and 
repair  as  they  know  how.  Also,  on  Russian  ships  officers  perform  ail  maintenance  functions:  ratings 
merely  operate  the  equipment.  Whether  this  has  any  bearing  on  the  maintenance  strategy  is  a  subject 
which  could  be  debated  at  length. 

EXISTING  SHIPBOARD  CONTROLLERS  AND  SENSORS 

Information  contained  in  this  section  of  the  report  was  obtained  primarily  through  visits  made  to 
numerous  U.S.  naval  ships  during  1979.  Athough  many  gaps  in  the  data  collected  exist,  the  objective 
was  to  obtain  information  on  each  ship  in  the  following  format: 
number  of  freight/ weapons  elevators 
controllers: 

manufacturers 

voltages 

types 

problems 
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mean  time  between  failure  (MTBF) 
condition  monitoring/ maintenance  aids 
suggestions  for  improvement 
sensors: 

manufacturers 

voltages 

types 

reliability/availability  information  (MTBF) 
maintainability  and  ease  of  maintenance 
signal  noise  problems 
suggetions  for  improvement 
information  on  elevator  usage  rates 
training  recommendations 

A  summary  of  data  on  all  existing  ammunition  and  bomb  elevators  on  aircraft  carriers  is  given  in 
[5].  This  publication  forcefully  illustrates  the  wide  range  of  elevator  geometries,  configurations  and 
loading  capacities  found  on  aircraft  carriers.  It  was  quickly  discovered  that  there  was  a  limited  number 
of  elevator  controller  manufacturers.  This  being  the  case,  it  was  decided  to  present  the  information  in 
the  order  of  manufacturer. 

Cutler  Hammer 

A  series  of  elevator  controllers  were  provided  for  later  COONTZ  class  destroyers  (DLGN  38-41) 
using  an  entirely  AC  system. 

All  circuits  were  1 10  VAC  60  Hz  except  for  the  elevator  motors  which  were  440  VAC  3  phase  60 
Hz  and  the  elevator-motor  brake  which  was  360  VDC/62  VDC.  The  limit  switches  were  all  elec¬ 
tromechanical. 

The  design  provided  for  a  safe  stop  unless  simultaneous  failure  occurred  of  two  or  more  com¬ 
ponents.  The  car  will  also  brake  if  the  supply  voltage  is  removed  or  is  too  low  and  also  if  the  high¬ 
speed  contactor  does  not  de-energize. 

Entirely  440  VAC  controllers  were  provided  as  original  equipment  for  forward  and  aft  strike-down 
elevators  on  the  SPRUANCE  class  destroyers  (DD963)  [6],  These  elevators  are  lightly  loaded 
(2340Kg)  (5200  lb)  and  operate  at  slow  speed  18/3  m/min  (60/10  ft/min).  In  this  system,  made 
entirely  by  Cutler  Hammer,  all  contactors,  relays,  push  buttons,  and  limit-switches  operated  from  440 
VAC  across  two  phases  (ungrounded) . 

Because  of  several  near  accidents  with  this  440  volt  system,  SPRUANCE  class  destroyers  are 
presently  being  back-fitted  with  controllers  using  less  lethal  voltages  on  the  push-buttons  and  sensors. 
(See  Unidynamics  later.) 

One  very  successful  Cutler  Hammer  product  line  was  called  Direct  Static  Logic  (DSL).  The  DSL 
system  is  used  in  many  naval  ships,  in  particular  the  USS  NIMITZ  (CV AN-68)  and  the  USS 
EISENHOWER  (CV AN-69)  [7,8],  Maintenance  problems  on  a  DSL  controller  were  investigated  dur¬ 
ing  a  visit  to  the  USS  NIMITZ. 

The  Cutler  Hammer  Direct  Static  Logic  (DSL)  controller  on  the  USS  NIMITZ  uses  elemental 
logic  functions  in  an  ad-hoc  design  process  to  provide  "send"  but  not  "call"  control  from  more  than  one 
station. 

Types  of  logic  cards  are:  3  input  "and,"  3  input  "or,"  3  input  "power  and,"  "not,"  "set/re-set,"  "flip- 
flop,”  "out  amplifier,"  "re-set  gate"  and  "resistor  signal  converter." 
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The  logic  uses  10  VDC.  Certain  functions  such  as  emergency  run,  high-  and  low-speed  overload, 
slack  cable,  overtravel  switches,  push-buttons,  etc.,  use  48  VDC.  Power  supplies  are  10  VDC  at  8  A 
and  48  VDC  at  3  A.  An  example  of  an  “or"  logic  card  is  shown  in  Fig.  1. 

In  the  technical  manual,  29  sheets  of  logic  drawings  are  provided  which  require  a  certain  determi¬ 
nation  on  the  part  of  qualified  maintenance  personnel  to  decipher.  A  page  taken  from  the  notebook  of 
one  EM  showing  his  personal  attempt  to  understand  the  system  is  shown  in  Fig.  2. 

Other  functions  used  with  the  logic  cards  are  "timer,"  "stepper"  and  "pulser."  In  the  logic,  10  VDC 
is  logic  one  and  0  VDC  is  logic  zero. 

The  48  VDC  signals  from  contact-type  inputs  go  through  resistance  converters  to  reduce  the  level 
to  10  VDC  for  use  with  DSL.  "Send"  push-buttons  are  ineffective  once  the  elevator  has  started  to  run. 

A  jogging  control  is  provided  which  operates  directly  on  the  motor  contactors  and  will  not  be 
described  further.  Emergency-stop  features  are  provided  per  MIL-E- 17807. 

Extreme  upper  and  lower  deck  memories  are  always  set  so  that  if  there  is  a  proximity  switch 
failure  at  an  intermediate  level  the  elevator  will  continue  up  or  down  and  stop  normally  at  the  highest 
or  lowest  level.  If  the  high-speed  contactor  does  not  drop  out  when  commanded  to  do  so  the  elevator 
stops  at  high  speed. 

Failure  mode  design  is  such  that  the  elevator  never  fails  to  stop  except  on  simultaneous  failure  of 
two  or  more  proximity  switches,  logic  elements  or  contactors.  There  are  back-up  electromechanical 
overtravel  switches. 

If  there  is  power  failure,  upon  restoration  the  elevator  will  not  run.  Push-button  lights  are  all 
backed  up  with  two  lamps.  Push-buttons  are  shock  tested  to  grade  A,  Class  1  in  MIL-S-901.  Logic 
boards  have  trouble-shooting  tungsten  lights  derated  in  voltage  by  50%.  The  style  of  controller  technol¬ 
ogy  is  printed  circuit  board  with  discrete  germanium  transistors.  The  technology  is  about  15  years  old. 

The  input  to  proximity  switches  is  115  VAC  at  60  Hz  and  10  VDC.  Proximity  switches  are  of  the 
two  part  device  with  sensing  head  located  remotely  from  the  logic  module  which  amplifies  the  signal 
from  the  sensing  head  and  converts  it  to  10  VDC.  Two  switches  are  provided  with  ranges  of  5  cm  and 
1.25  cm.  The  switch  is  of  the  variable  reluctance  type.  With  a  steel  target  in  front  of  the  head  the 
switch  logic  module  has  10  VDC  out.  Details  of  the  switch  head  and  amplifier  circuitry  are  shown  in 
Fig.  3. 

Because  of  potted  construction,  sensing  heads  are  considered  explosion-proof  and  water-tight,  but 
there  is  no  limiting  of  current  to  the  sensor.  When  the  target  is  in  the  sensing  zone  the  sensing  head 
has  an  output  that  is  amplified,  rectified  and  filtered,  switching  the  output  of  the  Schmidt  trigger  off  and 
turning  the  output  switch  to  its  "on"  state.  Thus,  with  the  target  in  the  sensing  zone  there  is  an  output 
and  the  state  light  LI  in  Fig.  3  is  on. 

Sensitivity  of  the  switch  can  be  adjusted  through  potentiometer  PI,  Fig.  3.  The  sensing  coils  are 
in  series  opposition.  When  energized  by  mutual  inductance  of  the  third  coil  the  output  is  balanced  by 
means  of  the  tuning  slug.  When  the  target  enters  the  sensing  field  the  balance  is  disrupted  resulting  in 
a  low-level  AC  output  from  the  head.  A  portable  DSL  board- tester  is  provided. 

Spares  are  very  costly  and  difficult  to  obtain  for  the  DSL  controllers.  There  is  only  one  Cutler 
Hammer  supplier  for  the  germanium  transistors  used  and  so  many  naval  ships  are  dependent  on  one 
small  business  operation.  There  is  a  nine  months  delivery  on  cards.  On  the  NIMITZ  one  elevator  was 
being  cannibalized  for  parts.  Usage  rates  were  such  that  during  in-port,  two  elevators  were  run  two  to 
three  times  a  day;  while  at  sea  two  or  three  elevators  are  run  continuously. 
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DIAGRAM  SYMBOL 

COMPONENT 

CHARACTERISTICS 

NUMBER 

REQUIRED 

C-H 

PART  NO. 

Rl.  R2.  R6.  R7.  Rll.  R12, 

R1S.  R17 

Resistor 

3300,  1/4  watt 

8 

RC07GF332K 

R3.  R8.  R 13.  R18 

Resistor 

470  ohm,  1/4  watt 

4 

RC07GF471K 

R4.  R9.  R14,  R19 

Resistor 

1000  ohm,  1/ 4  watt 

4 

RC07GF102K 

RS,  RIO,  R15.  R20 

Resistor 

470  ohm,  1/2  watt 

4 

RC20GF471K 

Q1  thro  Q8 

Transistor 

2N404 

8 

990041-1 

D1  thro  D12 

Diode 

IN  118 

12 

193243 

A  thro  D 

Lamp 

28  volt,  40  ma 

4 

990156-7 

NQTEl  Resistor  tolerone 


Fig.  1  —  Cutler  hammer  DSL  'OR'  card 
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Fig.  2  -  EM  notebook  extract  -  USS  NIMtTZ  cutler  hammer  DSL  logic  controller 
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•OPTIONAL  FILTER  NETWORK 
(CONNECT  PER  OOTTCO  LINES  WHEN 
UUO  WITHOUT  NETWORK ) 
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The  biggest  problem  of  maintenance  was  proximity  switch  circuits.  The  oroblem  was  made  worse 
in  the  writer’s  opinion  by  the  provision  of  sensitivity  adjustment  slugs  on  the  sensor  head  and  by  a  sen¬ 
sitivity  adjustment  potentiometer  on  the  first  amplifier  stage  of  the  proximity  switches.  Within  no  time 
at  all,  unqualified  maintenance  people  would  have  the  entire  elevator  sensor  system  out  of  alignment 
(see  Discussion  and  Recommendations  for  further  comments).  One  reason  for  sensor  problems  was 
that  proximity  targets  would  frequently  bend  or  be  knocked  off  for  one  reason  or  another. 

Another  problem  was  solenoid  valves  which  operate  dog/undog  mechanisms  etc.  When  solenoid 
replacements  were  made,  the  new  solenoids  were  found  to  draw  7.67  A  at  115  VAC.  Fuses  from  the 
output  amplifiers  were  6  A  slow-blow  which  at  first  blew  until  replaced  with  higher  rated  fuses.  After 
this  the  power  amplifier  cards  burned  out.  This  problem  points  to  the  need  to  design  into  ship  systems 
a  margin  for  alterations  and  modifications  to  be  made  during  the  ship  life. 

Recommendations  were  made  for  (a)  lights  which  indicate  that  particular  doors  are  open  not  sim¬ 
ply  that  all  are  closed,  (b)  lights  which  indicate  the  position  of  the  platform  at  all  times  and  do  not  go 
out  immediately  when  the  platform  leaves  a  level,  (c)  more  discrete  indicators  on  safety  circuits  instead 
of  one  safety  permissive. 

Digital  Equipment  Corporation 

Controllers  developed  by  Digital  Equipment  Corporation  were  used  for  Improved  Weapons  Han¬ 
dling  System  elevators  on  aircraft  carriers  of  the  FORRESTAL  class  (CVA59-62)  and  of  the  KITTY 
HAWK  class  (CVA63-64).  A  visit  was  made  to  the  USS  INDEPENDENCE  (CVA62)  to  investigate 
this  type  of  controller  [9]  system.  The  center  piece  of  this  controller  is  a  Digital  Equipment  Corpora¬ 
tion  (DEC)  PDP-14  mini-computer.  Other  names  for  this  controller  are  ROM,  which  stands  for  Read 
Only  Memory,  and  the  Phoenix  elevator  controller.  Problems  with  this  elevator  system  resulted  in  the 
study  of  Ref.  [1]  and  indirectly  to  the  present  study. 

On  the  INDEPENDENCE  there  are  hatches  at  the  main  deck  and  at  the  third  deck  which  are 
interlocked  so  both  cannot  be  opened  at  the  same  time.  These  hatches  are  both  water-tight  and  for 
ballistic  protection.  The  elevator  normal  mode  uses  the  automatic  controller.  There  is  also  a  manual 
jog  mode  which  will  not  be  mentioned  further. 

Deck  stations  on  the  elevator  have  the  ability  to  control  door  opening/closing,  placing  the  elevator 
in  run/stop  mode,  and  dispatching  to  any  other  station.  There  are  emergency-stop  push  buttons  and 
"car  here"  indicator  lights.  At  the  master  control  station,  in  addition  to  these  functions,  there  is  the 
capability  of  jogging,  if  the  jog  mode  is  selected  at  the  controller.  There  are  also  additional  information 
displays  for  such  things  as  low  hydraulic  pressure  with  different  colors  indicating  failures,  caution,  and 
operational-go. 

The  logic  controller  is  comprised  of  a  PDP-14  control  unit  (5  VDC  TTL),  interrogator  box.  acces¬ 
sory  box,  input  box,  three  output  boxes,  a  28  VDC  power  supply,  auxiliary  relays  for  up/down, 
high/low  speed,  two  diode  matrix  pinboards,  an  encoder  interface  panel,  a  proximity  test  switch,  an 
elapsed  time  meter,  six  platform  indicator  lights,  and  ten  terminal  boards.  The  controller  issues  com¬ 
mands  such  as  dog/undog,  latch/unlatch,  hatch  open/closed.  There  are  fault  indicators  of  system  mal¬ 
function  and  indicator  lights  to  assist  in  trouble  shooting.  The  controller  also  monitors  the  status  of 
door  interlocks,  slack  cable,  motor  overload  and  motor  temperature,  and  hydraulic  pressure. 

Practically  nothing  about  the  internal  workings  of  the  logic  controller  is  known  by  the  Electricians 
Mate  doing  maintenance.  He  knows  nothing,  for  example,  about  specifics  of  the  PDP-14  computer 
coding  (which  is  extensive).  Table  2  represents  page  14  of  the  25  page  revised  Weapons  Elevator 
Number  Six  ROM  Controller  Program  CVA-64-701-2283504  March  1976.  When  problems  occur  by 


Table  2  —  PDP-14  Controller  Software— Page  14  of  25  Pages 
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numbers  on  the  controller  indicator,  the  maintenance  EM  is  expected  to  simply  remove  and  replace 
electronic  cards  until  the  fault  is  isolated  and  corrected. 

The  approximate  platform  position  in  the  trunk  is  indicated  through  a  printed  circuit  card  encoder. 
There  is  also  a  gear-driven  limit  switch  safety  device  which  operates  independently  of  the  encoder  and 
is  mechanically  coupled  to  the  hoisting  cable  drum  shaft.  The  gear-driven  limit  switch  prevents  upward 
travel  of  the  platform  from  below  the  third  deck  as  it  approaches  the  third  deck  if  the  hatch  is  not  fully 
open.  This  switch  also  causes  system  power  to  be  removed  if  the  platform  fails  to  shift  to  low  speed 
when  approaching  the  main  deck. 

There  are  four  slack-cable  limit  switches,  an  overspeed  governor  limit  switch  and  a  speed  gover¬ 
nor  slack  cable  limit  switch.  Thirty  interlock  switches  are  used  in  the  six  doors  of  the  system;  two  for 
dogged,  two  for  undogged  and  one  for  door  closed  at  each  door.  There  are  up  and  down  overtravel 
limit  switches  at  the  extremes  of  travel  and  at  the  hatches.  The  overtravel  limit  switches  at  the  hatches 
are  bypassed  if  the  hatches  are  open.  Other  safety  interlocks  are  for  motor  high-speed  overload,  low- 
speed  overload  and  over  temperature. 

The  pressure  switch  monitors  the  hydraulic  power  [normally  10.33  x  106  Pa  (1500  psi)J  and 
breaks  a  safety  interlock  if  pressure  falls  below  8.26  x  106  Pa  (1200  psi).  An  air  hose  and  electric  cable 
are  provided  to  the  platform  on  the  elevator  for  the  pneumatic  locking  bars  and  to  service  the  active 
sensors  on  the  platform.  The  elevator  speed  is  41  m/min  (135  ft/min)  [57  m/min  overspeed  (190 
ft/min)]  and  6.7  m/min  (22  ft/min)  leveling  speed.  In  fault  isolation  of  the  PDP-14  an  interrogator 
box  BT-14A  is  used.  The  manual  contains  many  pages  on  fault  isolation. 

Proximity  switches  are  built  by  ELDEC  of  Lynnwood,  Washington.  They  are  four  wire:  plus  28 
VDC,  common,  built-in-test,  and  switch  output.  Circuit  boards  are  to  MIL-P-13949  type  GF.  The 
switch  is  encapsulated  in  rigid  epoxy  per  MIL-I-16923E  self  extinguishing.  Switches  operate  in  the 
sourcing  mode.  Mean  time  between  failure  is  greater  than  100,000  h.  Target  requirements  are  3.75  cm 
(1.5  in.)  x  8.75  cm  (3.5  in.)  of  0.625  cm  (0.25  in.)  steel.  The  test  circuit  operates  by  connecting  the 
test  lead  to  high  for  a  target  away  condition,  or  the  test  lead  to  open  for  a  target  near  condition.  Nor¬ 
mal  operation  is  with  the  test  lead  connected  to  common.  There  are  26  proximity  switches  utilized  in 
the  elevator  system  comprising;  12  for  the  main  deck  hatch,  12  for  the  third  deck  hatch  and  2  for  the 
elevator  platform.  The  ELDEC  switch  used  in  this  system  works  on  the  eddy  current  loss  principle. 
(See  lower  Fig.  4.)  The  proximity  switches  used  on  this  elevator  were  the  ones  which  gave  the  least 
maintenance  problems  of  any  elevator  system  visited.  This  was  because  of  the  clear  on-off  signal  with 
no  adjustment  or  tuning  slugs  and  also  because  of  the  added  test  feature. 

The  ELDEC  switch  described  above  is  part  number  08748-8-078.  Initially  this  switch  experienced 
problems  in  electromagnetic  interference.  After  correction  by  the  manufacturer,  later  versions  of  the 
switch  passed  MIL  Spec,  radar  frequency  testing. 

Comments  by  maintenance  crew  on  the  USS  INDEPENDENCE  were  that  the  controller  was  too 
complicated  for  the  ship's  force  to  maintain.  They  would  prefer  to  be  able  to  trouble  shoot  the  con¬ 
troller  with  an  ohmmeter.  Mechanical  relays  and  lights  or  simple  "ancf  and  "of  logic  was  preferred 
(they  had  no  problems  with  the  motor  controller).  On  the  INDEPENCENCE  two  EM-3s  were  dedi¬ 
cated  to  maintaining  Phoenix  elevators.  More  maintenance  time  was  spent  on  the  two  computer  con¬ 
trolled  elevators  than  on  all  of  the  remaining  20  freight,  food,  and  weapons  elevators  on  the  ship. 

Phoenix  elevators  were  down  two  to  three  times  every  week.  The  primary  sources  of  problems 
were  O-rings  of  hydraulic  cylinders  which  operate  the  doors,  elevator  electric  systems,  and  computer 
cards.  This  elevator  has  platform  locking  bars  and  the  greatest  source  of  problems  is  that  locking  bars 
will  not  extend  unless  the  platform  is  practically  dead  level  (within  0.15  cm).  This  need  for  leveling 
conflicts  with  the  ±  0.625  cm  (±  0.25  in.)  requirement  of  the  elevator  specification  MIL-E-17807B. 
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Variable  Reluctance  Proximity  Switch 


Eddy  Current  Loss  Proximity  Switch 


Fig.  4  —  ELDEC  proximity  switch  electrical  circuits.  Reprinted  with 
permission  from  ELDEC  Corporation. 


Usage  rates  on  the  INDEPENDENCE  weapons  elevators  were  that  the  two  Phoenix  elevators 
were  run  once  or  twice  a  day  in  port  and  continuously  at  sea.  Maximum  continuous  operation  recorded 
was  72  h  straight.  There  was  always  the  need  for  both  Phoenix  elevators,  and  at  least  two  others,  to  be 
running  at  the  same  time. 

EMs  maintaining  the  visited  PDP-14  systems  all  had  very  little  elevator  training  and  none  had 
been  to  the  ROM/ENCODER  school.  Suggestions  made  were  that  it  would  be  helpful  in  trouble  shoot¬ 
ing  if  there  were  lights  for  every  door  interlock  instead  of  one  door  interlock  permissive. 


G  O.  THOMAS 


General  Electric  Directomatic  I 

Older  versions  of  the  General  Electric  Directomatic  elevator  controller  are  installed  on  many 
ships.  The  one  visited  was  USS  KENNEDY  (CVA-67)  [101.  Original  equipment  on  the  KENNEDY 
provided  for  Directomatic  control  of  a  series  of  bomb  conveyors  as  well  as  elevators.  Alterations  to  the 
ship  have  discontinued  servicing  and  are  presently  in  the  process  of  removing  the  conveyors.  Since  the 
conveyor  controllers  are  being  left  with  the  ship  for  spare  parts,  there  is  no  shortage  of  spares. 

The  Directomatic  static  controller  uses  "nor'  logic.  The  technology  is  aged  about  1950.  Each  of 
the  cards  made  with  glass  melanine  is  constructed  using  individual  wire  hookups  between  the  pins. 
Plugs  and  receptacle  contacts  are  gold  plated.  Boards  are  conformal  coated  (dipped  in  a  special  tran¬ 
sparent  plastic  compound) . 

Voltage  levels  used  are  -6  VDC  bias  supply  for  the  logic,  and  +25  VDC.  The  +25  VDC  power 
supplies  the  logic,  static  limit-switches,  push  buttons  and  indicating  lights. 

All  cables  are  zero-current  (both  wires  of  a  single  phase  circuit  or  all  three  conductors  of  a  three- 
phase  circuit  are  run  within  the  same  armor)  AC  lines  operating  at  high-power  levels  are  routed  away 
from  the  logic  inputs.  Power  supply  leads  .  cascaded  from  device  to  device.  The  design  minim¬ 
izes  ground  loops  in  static  limit-switch  ^igrw;-  **-•*«  Signal  cables  are  not  in  the  same  conduit  or  cable 
trough  with  power  or  relay  coil  wire?  *'■  5»  controlling  the  elevator  platform,  hatches  and  door 

operations  are  115  VAC  single  phase  IT ,  *e  coil  operates  from  a  rectifier  providing  100  VDC. 
Limit  switches  operate  at  25  VDC  on  2?  '+  '.  The  switches  operate  with  a  vane  between  caliper  arms. 
High  voltage  is  11.5  to  16.2  VDC  with  present.  Low  voltage  is  less  than  1  V. 

The  elec..ical  configuration  of  the  General  Electric  limit  switch  is  shown  in  Fig.  5.  The  switch  is 
of  the  variable  inductance  type.  The  insertion  of  a  copper  vane  in  the  22  mm  (0.875  in.)  slot  separat¬ 
ing  primary  and  secondary  coils  of  a  transformer  affects  the  level  of  an  oscillator  circuit,  which  is 
detected. 

There  were  no  serious  maintenance  complaints  regarding  the  General  Electric  switch  on  the  USS 
KENNEDY.  There  had  been  six  replacements  in  two  years.  There  was  a  proximity  switch  availability 
problem.  The  principle  cause  of  replacement  was  the  vane  construction  which  was  designed  into  the 
switch.  Some  elevators  on  the  KENNEDY  had  5  cm  sway  as  they  moved  along  the  trunk.  Occasionally 
this  would  cause  the  vanes  to  wipe  out  the  switches. 

Some  time  ago  it  was  found  that  the  GE  proximity  switches  are  affected  by  radar  interference. 
Because  of  this,  electromechanical  switches  had  been  back  fitted  on  the  KENNEDY  at  flight-deck 
hatches.  In  one  way  this  defeats  the  purpose  of  proximity  switches  since  mechanical  switches,  which 
are  most  susceptible  to  environmental  corrosion,  are  placed  in  an  area  of  the  elevator  that  sees  the 
worst  marine  environment.  The  reason  why  the  mechanical  switches  at  the  flight  deck  did  not  produce 
maintenance  problems  was  that  the  flight-deck  hatches  were  rarely  opened. 

On  these  elevator  systems  there  are  four  proximity  switches  at  each  level,  one  slow  and  one  stop 
switch  for  both  up  and  down.  Usage  rates  for  1WHS  elevators  on  the  KENNEDY  were  given  as  4  h  per 
day  on  four  elevators  during  operations. 

The  major  maintenance  problems  connected  with  elevators  on  the  KENNEDY  were:  door  inter¬ 
lock  permissive,  emergency  stop,  and  slack  cable.  Only  two  controller  cards  on  the  average  were 
replaced  every  two  months.  The  elevators  were  normally  operated  in  the  manual  mode,  however,  in 
preference  to  use  of  the  automatic  feature. 
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Pig-  5  —  Cieneral  electric  proximity  switch  electrical  configuration 
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There  were  no  trouble  shooting  aids  on  the  Directomatic  controller.  All  that  was  available  was  a 
test  tight  hooked  up  with  two  leads  of  wire.  EMs  maintaining  the  elevator  system  were  unanimous  that 
they  would  like  to  receive  more  elevator  training. 

It  is  normal  to  install  lights  or  horns  at  flight  or  main  deck  hatches  on  aircraft  carriers.  This  safety 
feature  was  omitted  on  the  KENNEDY  and  aircraft  have  been  overturned  as  a  result. 

General  Electric  Directomatic  II 

The  GE  Directomatic  II  is  a  later  version  of  the  Directomatic  I  using  individually  wired  printed 
circuit  cards  with  technology  about  12  years  old.  Many  ships  in  the  Fleet  used  Directomatic  II.  The 
ship  visited  was  the  USS  CANISTEO  (AO-99)  [11).  This  is  a  medium  speed  elevator  (30  m/min/5.1 
m/min)  made  by  Turnbull  Elevator  Inc, 

In  Directomatic  II,  positive  logic  is  used  (logic  one  is  about  7  VDC,  logic  zero  is  less  than  0.5 
VDC).  Logic  types  are  "and,"  "or,"  "exclusive  or,"  and  "logic  inverter."  There  are  also  time-delays, 
oscillators,  flip-flops,  single-shots,  Schmidt  triggers,  shift-registers,  digital  amplifiers,  and  indicators. 
There  are  also  annunciators,  clock  drivers,  display  drivers,  gate  expanders,  input  buffers,  relay  drivers, 
triggers,  and  filters,  etc. 

Simple  logic  functions  such  as  "and"  and  "or"  are  achieved  through  a  combinatic  t  of  resistors  and 
diodes.  One  standard  load  equals  1.6  mA  at  20  KHz  maximum  pulse  rate  connected  to  the  +12  VDC 
power  supply.  Open  inputs  are  considered  high.  For  logic  zero,  an  input  must  be  grounded.  Power 
supplies  are  +12  VDC  regulated  for  logic  and  +28  VDC  at  3  A  unregulated  for  external  functions  and 
for  relays  through  relay  driver  cards,  etc.  Inputs  from  miscellaneous  interlocks  and  push  buttons  must 
be  25  VDC  at  the  terminal  board.  Inputs  from  noninverting  static  limit  switches  with  "vanes-in"  should 
be  12  VDC  at  the  input  buffers.  Inputs  from  inverting  static  limit  switches  with  "vanes-out"  should  be 
14  VDC  at  the  input  buffers.  Proximity  switches  used  on  the  CANISTEO  are  standard  General  Electric 
vane-type  Fig.  5. 

The  basic  circuit  is  an  oscillator  and  a  detector.  The  transformer  primary  is  wound  onto  one  arm 
of  the  limit  switch  and  is  part  of  the  oscillator  tank  circuit.  The  transformer  secondary  is  wound  into 
the  other  arm  of  the  limit  switch  and  is  connected  to  a  rectified  circuit.  Coupling  is  changed  by  a 
copper  vane  positioned  between  the  two  arms.  The  rate  and  level  of  oscillation  is  set  at  the  time  of 
manufacture.  There  is  no  adjustment  needed  by  personnel  aboard  ship.  This  switch,  which  is  based  on 
inductance  coupling,  goes  from  an  output  state  to  no  output  when  the  vane  is  inserted. 

Maintenance  problems  are  that  25  proximity  switches  have  been  replaced  in  two  years.  In  a  three 
month  period,  one  or  two  controller  cards  are  always  found  to  be  faulty.  The  ship's  crew  had  ,'roblems 
locating  bad  cards.  There  should  have  been  a  card  tester  on  the  ship  but  maintenance  people  did  not 
know  where  it  was.  Cards  were  not  intended  to  be  repaired  at  the  component  level.  They  were 
designed  as  a  throw-away  item. 

Usage  rates  on  the  elevators  were  about  30  times  each  day  in  port  and  10  times  each  day  at  sea 
when  there  were  no  exercises.  During  underway  replenishment  all  elevators  made  about  100  cycles  in  a 
12  h  period. 

The  Directomatic  II  controller  is  also  used  for  control  of  bow-ramp  operation  on  the  NEWPORT 
Class  (LST-1179)  of  tank  landing  ship.  For  this  application  the  proximity  switches  are  made  by 
Microswitch  and  are  of  the  variable  reluctance  type.  The  switches  are  watertight  and  sealed  throw-away 
units  and  details  of  the  circuitry  are  not  available. 
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There  are  34  proximity  sensors  per  vessel.  Sensors  are  shock  tested  to  MIL-S-901  grade  A  Class 
1.  The  sensor  is  temperature  compensated  for  operation  between  -34°  and  +  88°C.  MIL  Spec,  tested 
endurance  exceeds  100,000  cycles.  Other  tests  to  MlL-C-23994  include  vibration,  under-voltage,  vol¬ 
tage  limits,  insulation  resistance,  dielectric  strength,  and  to  meet  water-tight  requirements. 

The  sensor  head  is  shown  in  Fig.  6.  Sensing  distance  is  about  25  mm  (1  in.)  as  determined  by 
the  target  size  (see  Fig.  7).  Sensors  require  a  preamplifier,  which  is  also  potted  and  a  throw-away  unit. 
Sensors  can  be  separated  from  the  preamplifier  by  up  to  45  m  (150  ft)  of  four  conductor  twisted 
shielded  pair  20  gauge  cable.  For  unshielded  cable  the  power  leads  must  be  separated  from  the  signal, 
and  all  should  be  inside  of  metallic  conduit. 

Input  to  the  sensor  head  is  33  VAC  60  Hz  at  81  mA.  Output  is  from  0.9  to  2.0  VAC  at  60  Hz 
and  33  /a  A.  The  preamplifier  (42  FC  22)  provides  an  output  of  100  mA  at  20  VDC.  The  output  is 
normally  de-energized. 

Protection  is  provided  for  output  shorting,  failsafe  and  transient  voltage.  There  is  a  50  ms  built-in 
delay  at  the  sensor  head  to  protect  against  false  voltages  entering  the  system.  The  input  power  is  first 
isolated  with  a  step  down  constant  voltage  transformer  and  the  DC  is  filtered  and  zener  diode  regulated. 
The  amplifier  output  has  shunting  and  blocking  diodes  for  protection. 

Puget  Sound  Naval  Shipyard  Relay  Controller 

There  are  two  versions  of  the  Puget  Sound  relay  controller  presently  aboard  ships.  The  hybrid 
controller  was  back  fitted  to  all  elevators  aboard  the  USS  CAMDEN  (AOE-2)  and  on  one  elevator 
aboard  the  USS  SACRAMENTO  (AOE-1)  [121.  An  all  MIL  Spec,  electromechanical  relay  version  of 
the  controller  is  being  evaluated  aboard  the  USS  CONSTELLATION  (CV-64).  Operation  of  the  hybrid 
controller  was  observed  during  a  visit  to  the  SACRAMENTO. 

Cargo  elevator  number  7  operates  as  "send"  only.  Doors  are  manually  operated  and  electrically 
locked.  The  elevator  has  normal  safety  features  including  emergency-stop.  The  run-stop  feature  stops 
elevator  movement  during  on-  and  oflf-  load  and  allows  the  door  to  be  opened  by  energizing  the  door 
solenoid  which  retracts  the  door  latch.  The  safety  interlock  relay  is  normally  energized  and  is  de¬ 
energized  by  interruption  of  power  on  any  safety  feature.  The  emergency  run  push  button  may  be 
depressed  to  by-pass  the  overload  contacts.  The  system  has  a  self-leveling  arrangement  where,  if  the 
platform  slips  through  a  level,  it  will  automatically  change  direction  and  return.  Front  and  rear  views  of 
the  control  panel  are  shown  in  Fig.  8. 

Logic  switching  is  achieved  using  six-pole  double-throw  miniature  commercial  electromechanical 
relays  (see  lower  Fig.  9),  These  relays  have  an  integral  light-emitting  diode  (LED)  light  for  use  as  a 
troubleshooting  aid.  There  is  also  a  test  socket  to  allow  individual  relays  to  be  checked. 

There  is  one  24  VDC  12  A  power  supply  for  the  entire  system  including  logic  elements,  indicator 
lights,  push  buttons  and  proximity  switches.  Electromechanical  liming  relays  are  used  in  connection 
with  the  self-leveling  feature  and  to  check  for  high-speed  contactor  drop  out.  The  circuitry  diagram  is 
extremely  simple  to  follow  but,  in  many  ways,  the  system  is  susceptible  to  the  effects  of  electromag¬ 
netic  and  electrostatic  noise.  Examples  of  this  are  the  paralleling  of  push  buttons  on  a  common  supply 
lead  and  the  use  of  commercial  solid-state  relays  which  are  not  externally  protected  for  over-voltage  and 
transient  spikes.  Solid-state  relay  output  is  provided  to  interface  the  motor  contactor  solenoids.  The 
solid-state  relays  are  made  by  Crydom.  They  are  not  tested  to  MIL-R-28750A  which  provides  for  test¬ 
ing  of  relays  under  over-voltage  and  transient  spike  conditions. 
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Fig.  7  —  Micro  Switch  variable  reluctance  sensor  range/target  data 


21 


(RAMP  STORAGE) 


li  <>  I  MOM  \S 


Control  Panel 
Front  View 


0 


MW'S 


&WtVfiw?.9i, 

if 

w 


WE? 
IV- 

K 

'  * 

»f  ^ 

■nate 


“  Z|U  :  :  il 


Control  Panei 
Rear  View 


t  IB  S  —  Pubci  Snunil  Vi\.il  Ship\aril  h\bru!  controller 


r 


\K1  HI  I’OR  I  K4KK 


G  O.  THOMAS 


Proximity  switches  generally  used  with  this  elevator  system  are  called  "GO"  switches  made  by  the 
General  Equipment  and  Manufacturing  Company,  Inc.  (Model  43-100).  The  switches  use  a  balanced 
rocker  arm  and  two  magnets  of  different  strengths.  When  ferrous  material  or  another  magnet  is 
brought  within  the  sensing  range,  the  magnetic  field  is  disrupted  permitting  the  lesser  strength  magnet 
to  switch  the  relay.  The  switch  remains  switched  until  the  actuator  is  removed,  causing  the  armature  to 
return  to  its  original  position. 

The  switch  is  hermetically  sealed  under  345  x  103  Pa  (50  psi)  of  purged  and  back-filled  hydrogen 
to  prevent  deterioration  of  contacts.  Contacts  are  rated  for  over  two  billion  cycles.  The  switch  is  rated 
at  1250  W  for  up  to  600  VAC  resistive  load.  The  switch  should  be  derated  for  DC  use.  Response  time 
is  0.008  s  with  repeatability  of  0.05  mm  (0.002  in.).  The  switch  has  been  MIL  Spec,  tested  for  shock 
and  vibration.  Under  MIL-S-901  there  was  no  apparent  physical  shock  damage  to  the  switches.  Con¬ 
tact  chatter  occurred  but  was  not  sufficient  to  cause  a  20  ms  relay  to  drop  out.  There  was  no  resonance 
noted  and  no  apparent  damage  to  the  switches  during  vibration  tests  to  MIL-STD-167. 

Other  qualification  tests  to  MIL  Spec.  QPL-2212-19  were  for  materials  and  workmanship,  weight, 
creepage  and  clearance,  general  operation,  inclination  (45°  and  60°),  temperature  rise,  endurance,  insu¬ 
lation  resistance,  and  effectiveness  of  enclosure  (the  switch  was  submerged  under  water  and  high 
vacuum  for  30  min.  each).  A  US  Coast  Guard  letter  dated  2  May  74  says  the  switches  are  acceptable 
for  use  in  Class  I  Division  1  Groups  A,  B,  C  and  D  hazardous  areas  based  on  approval  by  Canadian 
Standards  Association  File  Number  24226. 

The  discussion  with  Electricians  Mates  aboard  the  SACRAMENTO  revealed  that  they  preferred 
the  relay  controller  to  other  controllers  with  which  they  were  familiar.  Elevators  1,  2.  3,  4.  5  and  6  on 
the  SACRAMENTO  use  the  old  form  of  General  Electric  Directomatic  controller.  In  comparing  the 
old  Directomatic  and  the  relay  controllers  it  was  found  that  both  controllers  rarely  malfunctioned. 

On  the  GE  controller  about  one  static  switch  was  replaced  per  underway  replenishment.  One-half 
of  the  switch  replacements  were  because  of  electrical  faults,  the  remainder  were  knocked  off  because  of 
vanes  striking  them.  The  GE  cards  did  not  require  replacement  often.  The  main  fault  here  was  that 
resistors  would  burn  out  and  take  the  transistors  with  them. 

The  main  advantage  of  the  relay  system,  and  the  reason  it  was  preferred,  was  because  of  the  sim¬ 
plicity  of  the  circuit  diagrams,  the  trouble-shooting  aids  and  the  ease  of  effecting  the  maintenance.  Fre¬ 
quently  problems  in  the  relay  controller  could  be  isolated  and  corrected  without  referring  to  the 
technical  manual  at  all. 

Elevator  duty  information  for  the  SACRAMENTO  is  that  elevators  are  run  in  port  between  once 
a  week  and  five  to  ten  round  trips  per  day  (for  a  total  of  1-1/2  h  each  day).  During  load-out  (which  is 
about  every  6  mo)  elevators  are  run  for  four  days  continuously  at  20  h/day. 

A  MIL  Spec,  relay  version  of  the  Puget  Sound  Controller  was  installed  aboard  the  USS  CON¬ 
STELLATION  (CV-64).  There  is  no  log  of  experience  with  the  new  system  at  this  time. 

Differences  between  this  controller  and  that  on  the  SACRAMENTO  (other  than  use  of  MIL  Spec, 
relays)  are  the  use  of  a  combination  of  ELDEC  proximity  switches  which  were  already  installed  and 
"GO1  switches,  provision  of  relay  lights  separate  from  the  relays  they  monitor,  and  a  control  panel 
which  is  hinged  for  easy  access  to  the  rear. 

Push  buttons  allow  the  elevator  positioning  switches  to  be  checked  where  the  switches  have  a 
self-test  feature.  Measurements  made  on  the  system  showed  that  at  26  VDC,  from  2.7  to  3  A  were 
taken  from  the  power  supply.  In  this  system,  all  push  buttons,  contactors  and  solenoids  take  1 15  VAC. 
Total  AC  current  into  the  controller  at  115  VAC  was  4  A  rms.  Electricians  Mates  maintaining  the 
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elevator  systems  on  the  CONSTELLATION  generally  liked  relay  systems  but  could  find  very  little  to 
fault  the  PDP-14  controller  which  was  discussed.  On  the  CONSTELLATION  there  are  no  EMs  dedi¬ 
cated  to  the  PDP-14  systems  and  there  was  general  agreement  that  more  training  was  needed. 

Elevator  problems  generally  centered  around  sensor  adjustment  and  solenoid  burnout,  it  was  not 
established  whether  the  solenoids  burned  out  due  to  overheating  from  the  coil  when  the  plunger  does 
not  go  in  or  because  of  insulation  deterioration  caused  by  occasional  wetting  from  the  water-glycol 
hydraulic  fluid  mixture.  Duty  information  for  weapons  elevators  on  the  CONSTELLATION  is  that 
they  are  used  about  two  hours  per  day  in  port  and  often  one  hour  on  and  one  hour  off  for  three  weeks 
continuously  at  sea.  Members  of  the  Naval  Ship  Systems  Engineering  Station,  Philadelphia  commented 
in  [13]  on  the  Puget  Sound  Relay  Elevator  Controller.  The  following  significant  sections  were  extracted 
from  their  report. 

The  CAMDEN  has  experienced  failure  of  25  LED  indicators  since  the  initial  installation.  Indica¬ 
tors  are  integral  with  the  relay  and  are  not  replaceable  separately.  CAMDEN  has  also  experienced  six 
relay  coil  failures  since  installation.  This  appears  to  be  high  over  a  short  period  of  time.  The  solid-state 
relays  have  no  heat  sink,  but  Crydon  manufacturing  data  indicates  that  a  heat  sink  should  have  been 
provided.  At  least  four  solid-state  relays  have  failed  since  initial  installation,  which  is  a  high  failure  rate 
for  this  type  of  relay.  Both  CAMDEN  and  SACRAMENTO  have  experienced  unexplained  nuisance 
stops  of  their  relay  controlled  elevators.  Incomplete  seating  of  relays  has  been  suspected.  On  the 
CONSTELLATION  it  is  said  to  take  20  min  to  remove  a  MIL-Spec.  relay  with  the  present  securing 
method  as  opposed  to  a  minute  or  so  for  the  commercial  version  (the  20  min  has  since  been  reduced). 

Also  on  the  CONSTELLATION,  AC  and  DC  electrical  cables  were  passed  in  the  same  bundle. 
DC  wire  runs  were  not  shielded  in  the  relay  controller  enclosure.  Some  lines  to  solenoids  have  high 
current  surges  which  cause  DC  relays  to  change  state  erratically  (this  may  be  caused  by  interference  on 
ELDEC  sensor  built-in-test  circuits).  Recommendations  made  by  the  Naval  Ship  Systems  Engineering 
Station  were  that  an  elapsed  lime  meter  should  be  installed.  Separate  LED  indicators  on  input  and 
neon  lights  on  output  would  seem  to  be  the  most  reasonable  design  approach  for  the  future.  It  was  also 
recommended  that  standard  electronic  modules  (SEM’s)  should  not  be  discounted  in  elevator  control 
design.  It  is  believed  that  a  simple  effective  control  design  can  be  achieved  when  the  unique  blend  of 
elevator  system  knowledge  and  SEM  component  knowledge  is  merged. 


Unidynamics  Controllers 

Unidynamics  is  the  largest  supplier  of  elevators  to  the  marine  industry.  Table  3  lists  shipping 
interests  which  have  recently  installed  Unidynamics  elevators  and  dumbwaiters  in  their  ships.  Elevator 
types  manufactured  by  Unidynamics  include  those  for  transporting:  stores/freight,  pallets/ammunition, 
coal/grain,  and  personnel  (including  chimney,  tower  and  crane  servicing).  In  the  oil  industry  both  on 
tankers  and  on  off-shore  platforms  Unidynamics  has  provided  elevators  for  use  in  hazardous  environ¬ 
ments. 

Commercial  elevators  made  by  Unidynamics  generally  use  the  single  card  TTL  static-logic  con¬ 
troller  shown  in  Fig.  10.  The  design  methodology  used  is  similar  to  other  manufacturers  discussed  pre¬ 
viously  in  this  report.  The  front  view  of  the  logic  controller  card  showing  arrangement  of  integrated 
circuits  is  shown  in  upper  Fig.  10.  Lower  Fig.  10  shows  the  underside  of  the  controller  card,  which 
uses  wire-wrap  interconnections.  Unidynamics  manufactures  very  few  of  the  components  which  make 
up  the  controller.  For  example,  the  card  shown  in  Fig.  10  was  made  by  Cambian  and  the  wire-wrap  was 
performed  by  machine  through  a  subcontractor.  All  Unidynamics  commercial  controllers  operate  on  5 
VDC  TTL  with  no  optical  coupling  at  the  input.  The  output  is  via  solid-state  relays. 
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Unidynamics  manufactures  the  sensors,  which  are  vane  type  using  infrared  LEDs  and  photo¬ 
transistors  (see  upper  Fig.  9).  The  slot  width  for  the  vane  and  slot  depth  into  the  switch  are  1.9  cm 
(0.75  in.)  and  3.17  cm  (1.25  in.)  respectively.  Normally  sensors  are  placed  only  on  the  platform  with 
vanes  on  the  elevator  trunk.  In  some  cases  the  controller  has  also  been  placed  on  the  elevator  plat¬ 
form.  The  arrangement  of  sensors  is  that  there  are  live  on  the  platform.  Two  of  the  sensors  are  for 
stop  and  slow  and  three  sensors  are  arranged  to  provide  binary  information  based  on  the  number  of 
vanes  on  the  trunk  to  indicate  deck  level.  The  controller  using  three  sensors  in  this  manner  can  sense 
eight  deck  levels.  The  two  sensors  for  slow  and  stop  operate  in  a  manner  similar  to  other  controllers 
(particularly  the  Puget  Sound  Controller).  When  one  sensor  operates,  the  elevator  switches  from  high 
to  low  speed.  When  both  operate  the  elevator  stops. 

The  commercial  controllers  use  plastic  DIP  small-scale  integrated  circuits  in  sockets  with  gold- 
plated  contacts.  One  side  of  the  card  is  the  UT  plane  on  5  mil  copper  and  the  other  side  is  ground  with 
fiberglass  board  between  giving  good  capacitance  across  B+ . 

Unidynamics  has  considered  using  telephone  frequencies  for  providing  sensor  information,  and 
has  breadboarded  prototype  models.  They  have  not  used  the  technique  to  date  in  production  controll¬ 
ers  on  grounds  of  expense. 

The  Unidynamics  optical  sensor  has  several  advantages  and  disadvantages.  The  advantages  are 
that  the  sensor  can  be  used  in  hazardous  areas  where  current  must  be  restricted  in  an  intrinsically  safe 
manner  to  a  level  at  which  an  explosion  cannot  occur.  At  5  VDC  the  intrinsic  safety  regulations  permit 
600  mA  of  current  in  circuits  located  in  hazardous  areas.  Unidynamics  uses  these  sensors  also  for  push 
buttons  in  the  pump  rooms  of  tankers. 

Disadvantages  are  that  these  switches  are  susceptible  to  malfunction.  The  Unidynamics  switch 
shown  in  Fig.  9  has  been  subjected  to  spray  painting  which  has  covered  the  photo-transistor  window 
Cleaning  of  the  paint  proved  to  be  ineffective  since  the  solvent  was  found  to  also  interact  with  the  win¬ 
dow  material  causing  a  gradual  opacity  to  develop  over  a  period  of  weeks.  Far  less  paint  sprayed  than 
shown  would  necessitate  the  replacing  of  the  sensor,  which  is  the  presently  recommended  procedure 
when  paint  spray  has  been  in  the  air  near  these  elevator  sensors. 

Another  disadvantage  is  that  the  sensor  is  affected  by  sunlight.  Where  these  switches  come  in 
contact  with  the  open  deck  the  sensing  components  are  covered  by  a  split  rubber  boot  which  is  subject 
to  abrasion  by  the  vanes.  Direct  sunlight  will  saturate  this  sensor  even  if  the  light  is  pulsed.  Uni¬ 
dynamics  has  considered  using  60  Hz  pulse-light  as  a  safety  measure  for  detecting  an  error  condition. 
Another  disadvantage  is  that  while  the  LED  emitters  radiate  in  a  narrow  spectrum  of  infrared  the  photo 
transistor  responds  to  a  very  broad  range  of  frequencies.  Since,  by  design,  this  sensor  must  have  a  win¬ 
dow  which  admits  electromagnetic  radiation  it  is  suspected  that  the  switch  would  be  very  susceptible  to 
electromagnetic  interference. 

Problems  with  the  Unidynamics  commercial  controller  occurred  at  the  input  of  the  sensors  to  the 
controller.  Voltage  spikes  on  the  sensor  leads  were  responsible  for  destroying  input  gates  (which  have 
no  isolated  input  coupling).  Unidynamics  resolved  this  problem  by  installing  capacitors  on  all  sensor 
inputs  at  the  controller.  Another  problem  with  the  input  circuitry  is  that  the  TTL  input  operates  on  a 
ground  — open  circuits  float  high.  The  mode  of  operation  for  the  switch  is  that  for  the  vane  "in"  condi¬ 
tion;  the  TTL  signal  is  shorted  to  ground.  This  method  of  operation  does  not  give  a  safe  indication  of 
the  switch  condition.  For  example,  if  the  switch  is  not  there  at  all  and  the  signal  line  is  open,  the  con¬ 
troller  is  unable  to  detect  a  condition  that  would  call  for  stopping  the  elevator. 

A  Unidynamics  controller  was  reviewed  aboard  the  USS  STUMP  (DD-97S)  (14).  The  Unidynam¬ 
ics  strike-down  elevators  on  the  USS  STUMP  were  manufactured  to  MIL-E-17807B  using  standard  elec¬ 
tronic  module  (SEM)  units  for  elementary  logic  functions.  The  controller  system  on  the  STUMP  was 
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Tanker 

30.  OOODWT 

(1) 

fl) 

677 

TOOD  SHIPYARDS  CORPORATION 

(1) 

<» 

U.S.  N*ey 

Patrol 

Frigate 

FFC7  Clan* 

Pal 

Dm 
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toner  List  for  Marine  Elevators  and  Dumbwaiters 


Elevators  Dumbwaiters 

■  Shiw  Tvur 

Ship  Class 

Description 

No. 

t 

Destroyer 

DD9i.:i  Class 

Ammo  Elevators 

|60| 

Amphibious 

1  HA  class 

Personnel 

<*> 

Assault  Ships 

Medical  Evacuation 

(■>» 

Destroyer 

DD993  Class 

Ammo  Elevators 

1*1 

Excursion 

(Mississippi 

Queen) 

Personnel  (It)  Dumtm jiUts 

(2) 

Oil  Rig 

Semi- 

subnic  rsible 

Personnel 

|2) 

Submarine 

AS  39.  40  *  4 1 

Cargo  Elevators 

124) 

Tenders 

DumhwaatiTH 

(31 

OBO  Carrier 

KO.  500 DWT 

Personnel 

III 

II) 

Tanker 

»7 .  UOODWT 

ill 
(  h 

H9.  700DWT 

ill 
i  1) 
(I) 

ID 

ID 

(I) 

ill 

(D 

III 

(!) 

Tanker 

138.000DWT 

Personnel 

Ill 

(1) 

1 50, 000 DWT 

ID 

ID 

LPKi  Carrier 

65.000DWT 

Personnel 

(1> 

111 

(D 

VLCC 

390.770DWT 

Personnel 

ID 

ID 

ID 

Exhibition 

Personnel 

ID 

Barge 

HO/RO  Ship 

4500  DWT 

Stores  Dumbwaiter 

ID 

ID 

Tanker 

225.0000WT 

Personnel  (1)  Stones 

ID 

(1)  " 

ID 

(1)  " 

ID 

Personnel 

ID 

OTHER  SPECIAL  E LEV  ATORS  AMI  DUMBWAITERS 


Prime  Contractor 

<  >w  nr  r 

Location 

Corps  of  Engineers.  Huntsville 

l'  S.  Army 

Safeguard  Site 
North  Dakota 

Boston  Naval  Shipyards 

C.  S.  Navy 

Boston  NSY 

Pullman  Power  Products 

Pennsylvania 

Power  Company 

New  Castle. 

Pa. 

Fluor  Pioneer 

Louisville  Gas  & 
Electric 

Kosmcksdale, 

Ky. 

Cargill.  Inc. 

Portland,  Ore. 

Manitowoc 

Engineering 

Manitowoc, 

Wise. 

Hludco  Shipping 

E.  I.  DuPont 

Tug-  Boat 

Valley 

Communications 

Harlinville. 

Texas 

TVA 

Raccoon  Mountain 
Storage  Plant 

Corps  ol  Engineers 

Omaha 

L'.  S.  Army 

Garrison  Dam 

Uni- Enterprises 

Mobil  Shipping 

Geophysical 

Vessel 

Nissho  Iwai  Company 

Zealand  Service 

Container  ships 

Bethlehem  Steel 

U.  S.  Navy 

Cable  Ship 

McNally  Pittsburg 

Grand  River 
Authority 

Pryor.  Oklahoma 

U.  S.  Bureau  of 
Reclamation 

Grand  Coulee  Dam 

McNally  Pittsburg 

Midwest  Mining 

Salinas  County. 
Illinois 

Rust  Chimney  Dtv. 

Texas  Municipal 
Power  Agency 

Carlos.  Texas 

Hope  man  Bros. 

U.  S.  Corps  of 
Engineers 

Hopper  Dredge 

Sargent  &  Lundy 

Wisconsin  Public 
Service 

Wausau.  Wise. 

Tanker 

125,000 DWT 

RO/NO  Ship 

14  000 DWT 

Tanker 

1 18, 200 DWT 

ro/ro  nip 

14.000 DWT 

Tanker 

30.000 DWT 

Patrol 

PPG7  Class 

Prints 

Personnel 

U) 

(1) 

(D 

Personnel 

<D 

ID 

ID 

Personnel  <11  Dumbwaiter 

(D 

"  (D 

(1) 

Pallet  Elevators 

(17) 

Dumbwaiters 

117) 

UNIDYNAMICS 


, 

i 
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A 


( 


Ele >  aid r  Typr 
Freight 
Passenger 

Workmen's  Hoist 

Chimney  Elevator 

Chimney  Elevator 

Crain  Processing 
Plant  Elevator 

Service  Elevator 
for  Crane 

Personnel  Elevator 

Tower  Elevator 

Inspection  Manlift 

Rack  L  Pinion  Elevator 

Dumbwaiter 

Dumbwaiters 

Dumbwaiters 

Coal  Processing 
Plant  Elevators 

Rack  |i  Pinion 
Elevator 

Coal  Processing 
Plant  Elevator 

Rack  li  Pinion 
Chimney  Elevator 

Dumbwaiter 

Rack  L  Pinion 
Chimney  Elevator 
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Front  View 
Showing  Arrangement 
of  IC’s 


Rear  View 
Showing  Wire-Wrap 
Interconnections 


Fig  10  —  Unidynamics  commercial  TTL  static  logic  controller 


G  O.  THOMAS 


back  fitted  as  a  replacement  for  the  original  Cutler  Hammer  equipment  which  used  440  VAC 
throughout.  Because  of  this  ship  modification,  the  STUMP  has  had  both  the  highest  and  lowest  vol¬ 
tages  on  elevator  sensor  signal  leads  that  are  found  in  the  fleet  today;  namely  440  VAC  and  5  VDC. 
Eventually  it  is  planned  to  convert  all  ships  of  the  SPRUANCE  class  to  lower  voltage  controller  sys¬ 
tems.  The  controller  aboard  the  STUMP  had  just  been  installed  at  the  time  of  the  visit  and  no 
maintenance  or  operational  experience  data  were  available.  A  four  day  school  on  the  controller  had 
been  held  aboard  the  ship  by  Unidynamics.  This  was  supposed  to  be  a  one-time  event. 

Sensors  used  on  the  STUMP  are  standard  Unidynamics  with  split-rubber  boot  covering  to  prevent 
interference  from  sunlight,  especially  at  the  weather  deck  hatch  level.  Documentation  was  not 
uncovered  to  show  that  the  Unidynamics  infrared  sensor  has  passed  MIL-Spec.  radiation  testing. 

The  controller  aboard  the  STUMP  is  basically  the  same  design  as  Unidynamics  commercial  con¬ 
trollers.  The  system  is  5  VDC  TTL  and  is  not  isolated  at  sensor  inputs.  Outputs  are  optically  coupled 
to  solid-state  relays  which  drive  the  115  VAC  motor  controller  contactors.  The  solid-state  relays  are 
made  by  International  Rectifier.  The  motor  controller,  made  by  Cutler  Hammer,  drives  the  440  VAC 
elevator  motor.  The  5  VDC  supply  voltage  is  used  throughout,  including  for  the  optical  level-sensors, 
the  push  buttons  (which  use  the  same  optical  sensors),  and  for  mechanical  interlock  switches  at  the 
doors. 

On  the  USS  STUMP,  sensors  are  located  on  the  elevator  trunk  and  vanes  on  the  platform,  which 
is  opposite  to  Unidynamics  general  commercial  practice.  Continuous  light  sensors  are  used  and  there 
have  been  problems  already  in  connection  with  sunlight  interference.  Initially  the  vanes  were  painted 
white.  When  the  color  was  changed  to  black  the  problem  appeared  to  be  corrected.  Consideration y-as 
also  given  to  the  use  of  a  threaded  pipe  to  columniate  the  light.  As  on  commercial  controllers.  Uni¬ 
dynamics  has  installed  0. 1  m  F  capacitors  on  all  inputs,  to  filter  unwanted  noise. 

The  controller  on  the  STUMP  is  constructed  using  standard  electronic  modules  (SEM).  Standard 
electronic  modules  are  made  by  a  variety  of  manufacturers  to  a  high  level  of  military  specification  and 
certification  (see  MIL-N-28787A).  Environmental  tests  are  required  for  durability,  humidity,  thermal-  ' 
shock,  shock,  fungus,  corrosion  resistance,  flammability,  toxicity,  and  hydrogen  atmosphere.  Modules 
can  be  ordered  to  Class  I  or  Class  II.  Class  II  modules  are  subjected  to  more  severe  testing.  Operating 
environmental  requirements  consider  operating  temperature  range,  vibration,  transient  operating  tem¬ 
perature,  and  life  testing.  An  indication  of  qualification  requirements  for  SEM  modules  is  given  in 
Table  4.  k 

The  significant  advantages  of  using  SEM  modules  will  be  discussed  later,  but  at  this  time  one 
disadvantage  mentioned  by  Unidynamics  will  be  recorded.  SEM  modules  frequently  have1  multiple 
gates  or  flip-flops  on  the  same  card.  In  some  cases  it  is  necessary  to  use  a  card  with  six  flip-flops  on  it 
when  only  one  is  needed.  Another  comment  by  Unidynamics  was  that  the  present  card  box  on  the 
STUMP  is  wire-wrapped  at  the  back.  They  would  like  to  make  the  entire  card-box  a  plug-in  on  future 
ships  as  an  aid  to  trouble  shooting. 


A  great  advantage  of  using  SEM  modules  was  that  Unidynamics  was  able  to  design  into  the  con¬ 
troller  on  the  STUMP  a  mean-time-between-failure  of  one  year.  In  this  controller  there  are  no  lights 
for  testing  in  place  but  a  test  box  is  provided  inside  the  controller  cabinet  with  slots  to  take  each  key 
code  of  SEM  module  used. 

Recommendations  for  improvement  to  the  strike-down  elevator  were  offered  by  mates  responsible 
for  the  maintenance.  They  would  like  more  lights  indicating  the  position  of  the  platform  at  all  times. 
The  elevator  is  of  the  "send  only"  variety;  a  "calf  button  would  allow  the  platform  to  be  moved  around 
more  easily. 
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Table  4  —  Qualification  Requirements  for  SEM  Environmental  Classes 


OPERATING 

CLASS  I 

CUSS  II 

0*C  60*C 

VC  125*  C 

VIBRATION 

(FREQ  CPS) 
5-33 

mu 

(AMPLITUDE  IN) 
2QA  i30<j 

PEAK  SIN 
RANDOM 

NON  OPERATING 

CUSS  I 

CUSS  II 

DURABILITY 

500  CYCLES  | 

HUMIDITY 

MIL-STD-810  METHOD  507  PROC  1 

THERMAL  SHOCK 

-55°C  TO  *85®C 

-65°C  TO  ♦125°C 

SALT  FOG 

MIL-STD-810  METHOD  509  PROC  1 

SHOCK 

MIL-STD-810 

METHOD  516  PROC  1 

2  SINE  PULSE  FOR  11  ms  AT  50c 

FUNGUS 

MIL-STD-810  METHOO  508  PROC  1 

Duty  cycles  on  strike-down  elevators  are  such  that  they  are  usfed  about  3  h  continuously  each 
week  for  maintenance  checkout;  at  other  times  they  are  used  about  four  or  five  times  each  week  when 
the  ship  is  in  port  and  about  one  or  two  times  each  week  when  the  ship  is  at  sea  with  no  exercises. 

US  Elevator 

The  US  Elevator  Company  is  at  the  forefront  of  commercial  elevator  controller  technology.  In 
the  past  they  have  provided  the  US  Navy  with  many  onboard  elevator  controllers.  In  the  commercial 
area  the  company  now  turns  to  microprocessors  as  a  solution  to  most  high-speed  multi-level  controller 
systems.  A  single  20  cm  x  42.5  cm  printed  circuit  card  using  microprocessor- based  circuits  controls  an 
entire  elevator  system  in  Las  Vegas  [15].  Eight  elevators  and  forty-eight  landings  are  serviced  in  serial 
time-division  multiplexing  over  a  two-wire  system  with  Modem.  This  single  wire  pair  replaces  100 
signal-handling  wires  for  each  elevator  car.  The  microprocessor  used  was  the  Fairchild  F8,  which  is  an 
8  bit  NMOS  general  purpose  microprocessor.  More  recently  the  Intel  8085  microprocessor  is  being 
used.  Power  supplies  are  12  VDC  for  the  coded  serial  digital  data  and  48  VDC  for  push  buttons  and 
lights.  Solenoids  are  either  220  VAC  or  48  VDC.  The  controller  is  5  VDC  TTL.  One  microprocessor 
is  provided  for  each  car.  There  is  also  an  executive  microprocessor. 

This  computing  system  is  prepared  to  maximize  elevator  operation  during  up  peaks  and  down 
peaks.  Decisions  are  made  on  which  is  the  closest  car  and  whether  to  send  one  or  more  cars  to  a  par¬ 
ticular  landing.  Microprocessor  operation  was  selected  for  these  complex  elevator  systems  on  the 
grounds  of  cost,  reliability,  and  fewer  parts  that  can  fail  in  service.  For  the  commercial  market  US 
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Elevator  no  longer  uses  light  switches.  A  magnetic  switch  made  by  Maxton  is  used  which  is  operated 
by  means  of  a  steel  vane. 

A  shipboard  controller  made  by  US  Elevator  was  viewed  on  the  AD-41  while  this  ship  was  under 
construction  at  National  Steel  and  Shipbuilding  Co..  San  Diego.  Elevator  controllers  on  the  AD-42  will 
be  similar.  The  controller  enclosure  says  that  the  controller  is  static  logic  but,  in  fact,  US  Elevator 
would’,  call  it  a  TTL  synchronous  machine.  This  controller  effects  digital  switching  using  a  form  of 
microprocessor  made  from  lower  level  integrated  circuits.  The  only  reason  a  well-known  standard 
microprocessor  was  not  used  was  because  the  controller  designer  could  not  find  a  MIL  Spec,  version  of 
a  microprocessor  at  that  time. 

The  controller  uses  a  MIL  Spec,  tested  integrated  circuit  called  a  Field  Programmable  Sequencer 
(FPS).  Sigitetics  has  recently  developed  a  similar  special  integrated  circuit  for  elevator  control 
specifically  called  a  sequential  system  controller.  The  controller  on  the  AD-41  uses  a  slow-speed  two- 
phase  clock  (4  KHz). 

Programming  is  achieved  using  read  only  memory  (ROM).  Five  different  types  of  printed  circuit 
boards  are  used.  Integrated  circuits  are  soldered  into  the  boards;  there  are  no  sockets. 

A  shipboard  tester  will  be  provided  to  give  a  "GO"  or  "NO  GO"  determination  at  the  board  level 
(not  the  chip  level).  The  tester  itself  has  one  large  printed  circuit  board  about  37  cm  by  15  cm.  In  per¬ 
forming  the  test,  the  tester  is  aware  specifically  of  where  the  problem  exists  on  a  particular  board  but 
this  information  is  not  provided  to  the  maintenance  personnel  since  replacement  of  controller  com¬ 
ponents  is  at  the  board  level.  A  variety  of  sensors  are  used  in  conjunction  with  this  programmable  con¬ 
troller. 

Overtravel  limit  switches  are  electromechanical  wheel  actuator  type  made  by  Cutler  Hammer. 
Safety  switches  (excluding  door  interlocks)  are  electromechanical  plunger  type  made  by  Cutler  Ham¬ 
mer.  Door  interlocks  are  vane  type  proximity  switches  made  by  General  Electric.  Leveling  sensors  are 
magnetic  "GO"  switches  made  by  General  Equipment  Co. 

The  reason  given  for  this  perplexing  variety  of  sensor  types  is  that  electromechanical  safety 
switches  were  called  for  in  the  specification.  There  was  no  good  reason  for  using  General  Electric  prox¬ 
imity  switches  on  the  doors  with  "GO"  proximity  switches  in  the  trunk. 

The  mounting  of  the  leveling  switches  was  considered  too  flimsy.  Mounting  brackets  for  the  sen¬ 
sor  rail  were  22.5  cm  x  3.75  cm  x  3  mm.  Material  3  mm  thick  is  too  light  for  this  application  where 
bending  and  corrosion  could  cause  malfunction  of  the  elevator. 

CONTROLLER  PHILOSOPHY 

This  section  of  the  report  summarizes  contacts  made  with  designers  and  manufacturers  of  con¬ 
trollers  and  with  controller  design,  trouble  shooting  and  training  personnel  at  naval  shipyards  and  naval 
research  establishments.  The  discussions  centered  on  lessons  learned  from  past  experiences  with  ship¬ 
board  controllers  and  recommendations  for  improved  controllers  of  the  future.  The  section  begins  with 
a  brief  history  and  development  of  elevator  control  systems  abstracted  from  a  Puget  Sound  Naval  Ship¬ 
yard  inter-shipyard  memorandum  by  D  Osgood. 

Historical  Overview 

Problems  of  the  old  relay  control  systems  were,  (a)  the  relays  were  unreliable,  (b)  they  would 
stick,  short  out  and  require  constant  cleaning,  replacing  and  adjusting  of  contacts,  (c)  the  mechanical 
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switches  would  fail,  (d)  actuator  arms  would  corrode,  bend  and  break,  (e)  condensation  would  cause 
short  circuits  and  multiple  grounds.  Relays  were  placed  in  series/parallel  circuits  with  multiple  grounds 
causing  elevator  malfunctions  which  were  responsible  for  casualties.  Because  of  these  problems,  solid- 
state  controls  replaced  relay  control  systems.  The  solid-state  controllers  used  solid-state  proximity 
switches  that  were  potted  and  more  suitable  to  the  environment.  The  system,  however,  became  more 
complex. 

Problems  of  the  solid-state  discrete-logic  systems  were,  (a)  extremely  high  cost,  (b)  there  were 
electrical  noise  problems  (proximity  switches  would  actuate  due  to  interference  and  logic  would  mal¬ 
function  due  to  electrical  noise),  (c)  maintainers  found  it  difficult  to  troubleshoot  due  to  the  large 
number  of  different  kinds  of  modules,  (d)  it  was  found  that  the  typical  sailor  could  not  understand 
logic  diagrams  and  special  schools  were  set  up.  (e)  although  the  logic  diagrams  were  very  complex  they 
did  not  provide  all  of  the  interlocks  and  functions  required  to  interlock  the  main-  and  third-deck 
hatches. 

The  programmable  controller  was  the  next  type  of  controller  used.  This  was  more  complex  yet 
again  than  the  discrete  logic  type;  but  the  number  of  modules  was  greatly  reduced,  while  the  controller 
performed  many  additional  interlock  and  trouble  shooting  functions.  Switches  in  the  elevator  trunk 
were  replaced  by  a  shaft-encoder  and  diode  matrix  which  allowed  monitoring  of  platform  position 
within  1.25  cm  at  any  time  of  the  elevator  travel. 

Problems  of  the  programmable  controller  are,  (a)  complexity  (with  computer  type  operation  using 
register*,  communication  busses,  etc.,  the  sailor  cannot  find  a  bad  signal  and  trace  it  to  a  problem),  (b) 
reliability  (the  controller  is  intrinsically  highly  reliable,  however,  when  a  failure  does  occur,  the  system 
is  usually  down  until  outside  assistance  can  be  obtained),  (c)  isolation  of  fault  input  signals  (inputs  and 
outputs  have  indicator  lights  but  it  is  not  easy  to  determine  if  the  status  is  proper.  This  requires  a 
knowledge  of  the  software  program  and  how  it  functions,  knowledge  not  normally  possessed  by  the 
ship’s  force). 

Due  to  complaints  about  both  static-state  logic  controllers  and  programmable  logic  controllers,  and 
also  when  the  General  Electric  discrete  logic  controller  on  the  USS  DETROIT  (AOE-4)  could  no  longer 
be  supported  and  was  in  need  of  extensive  repair,  a  miniature  relay  controller  system  was  developed  for 
elevators  on  the  USS  CAMDEN  (AOE-2). 


Elevator  Cybernetics 

The  control  problem  for  a  large  weapons  elevator  is  illustrated  in  Figs.  11  and  12  taken  from  a 
technical  manual  for  the  USS  AMERICA  (CVA-66).  Although  the  word  cybernetics  has  rarely  been 
used  in  connection  with  onboard  elevator  control,  it  can  be  seen  that  the  control  problem  including 
safety  and  condition  monitoring  is  not  insignificant.  Stability  of  onboard  elevator  control  systems  in  the 
past  has  relied  upon  motor  acceleration  and  brake  deceleration  factors  and  general  mechanical  inertia  of 
the  system. 

The  control  technique  usually  used  in  these  systems  can  be  termed  ad-hoc.  To  design  for  ad-hoc 
logic  control  a  specific  set  of  logical  requirements  must  be  fulfilled  before  a  particular  enable  or  disable 
command  can  be  generated. 

There  are  other  more  sophisticated  techniques  which  could  be  considered  [16l  based  upon  linear 
feedback  servo-mechanisms  and  Nyquist  stability  criteria.  J.R.  Moore  is  credited  with  the  idea  of  com¬ 
bining  closed-cycle  control  with  open-cycle  control.  The  so-called  "Moore  Machine"'  uses  a  series  con¬ 
troller  with  open-cycle  forward  control  and  a  parallel  controller  for  feedback.  The  feedback  loop  is 
designed  for  stability  and  dynamic  response  while  the  steady  state  operations  are  taken  care  of  by  the 
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Fig.  11  —  Automatic  mode  controls  for  large  weapons-elevator  on  USS  AMERICA  (CVA-66) 


34 


G  O.  THOMAS 


open-cycle  portion.  Another  form  of  engineering  control  in  which  the  output  is  a  function  of  the 
present  state  and  the  input  is  named  for  Mieie.  US  Elevator  uses  "Miele  Machine"  in  all  of  its 
microprocessor  and  other  forms  of  dynamic  programmable  controller.  This  form  of  control  was  used 
on  the  AD-41.  Two  clocks  with  different  phases  operate  at  4  KHz.  The  input  and  present  state  is 
checked  at  the  pulse  rise  of  the  phase-one  clock.  Changes  are  made  to  the  next  state  on  the  pulse  rise 
of  the  second  clock. 

Just  how  much  sophistication  is  required  in  a  shipboard  elevator  controller  could  be  debated  at 
length.  Elevators  which  use  simple  relay-ladder  diagrams  and  static-logic  operate  quite  satisfactorily. 
Also,  in  most  present  systems,  an  error  signal  feedback  (on  leveling,  for  example)  could  not  be  used  in 
a  closed  loop  analog  servo  system  since  most  motor  drives  are  at  two  fixed  speeds.  There  are  two 
places  in  elevator  control  where  some  form  of  feedback  is  used  at  the  present  time.  One  is  in  the  case 
of  variable  speed  doors  on  passenger  elevators  and  the  other  is  to  assist  in  leveling  of  high-speed  eleva¬ 
tors. 


Shipboard  elevator  speeds  have  been  increasing  over  recent  years.  Why  this  is  so  is  not  entirely 
clear,  since  the  speed  of  the  elevator  is  not  a  significant  part  of  the  overall  efficiency  in  a  weapons  load¬ 
ing  or  replenishment  operation.  Since  the  ratio  of  high-  to  low-speed  for  elevator  motors  has  been 
fixed  at  6:1  this  increase  in  high  speed  has  brought  about  a  corresponding  increase  in  leveling  speed. 
Cutler  Hammer  pointed  out  that  on  recent  shipboard  elevator  designs  this  high  leveling  speed  has  been 
hard  to  work  with  while  still  maintaining  the  shipboard  requirement  for  leveling  at  6.25  mm  (±  1/4 
in.). 


Largely  because  of  this  problem,  recent  elevators  have  used  an  automatic  leveling  feature  whereby 
when  the  platform  slips  through  a  level  after  brakes  have  been  applied,  the  control  logic  senses  this  fact 
and  reverses  (pulses)  the  elevator  motor  for  a  short  duration  of  time  to  return  the  platform  to  within 
the  leveling  tolerance.  So  long  as  the  extra  time  necessary  for  automatic  leveling  is  acceptable  there  is 
probably  no  other  solution  which  would  be  as  straightforward.  For  cases  where  a  certain  amount  of 
automatic  leveling  time  is  objectionable  and  also  where  elevator  speeds  are  extremely  high,  it  is  neces¬ 
sary  to  develop  a  fully  variable  speed  controller  system  similar  to  those  being  prototyped  by  US  Eleva¬ 
tor  and  the  Reliance  Elevator  Company.  When  fully  variable  speed  drives  are  used  this,  once  again, 
increases  the  complexity  of  the  system  and  influences  the  reliability,  maintainability  and  training 
requirements. 

US  Elevator  implements  its  variable  speed  system  in  the  following  manner.  A  low-cost  single¬ 
speed  AC  motor  is  used  (Lincoln  or  equal).  AC  power  is  first  rectified  to  DC.  The  DC  is  then  re¬ 
inverted  into  three-phase  AC  using  pulse  width  modulation  techniques  and  power  FETs.  Note  that 
switching  is  achieved  with  transistors  and  not  silicon  controlled  rectifiers  (SCRs).  US  Elevator  said  that 
a  study  conducted  for  NASA  by  Kinematics  Research  Ltd.  found  SCR  triacs  not  safe  for  use  in 
human-vehicle  systems.  The  variable  speed  AC  drive  is  achieved  by  controlling  output  power  in 
voltage  and  frequency.  Volts  per  second  change  is  maintained  constant.  Frequency  can  be  varied 
linearly  with  time  from  DC  to  90  Hz.  As  frequency  increases  beyond  60  Hz  the  output  voltage  remains 
constant  at  440  VAC.  As  frequency  is  reduced  below  60  Hz  there  is  a  corresponding  linear  reduction  in 
output  voltage  to  zero  vol's  at  DC.  The  objectives  of  this  motor  controller  system  are  to  develop  con¬ 
stant  torque  at  low  frequencies  and  constant  horsepower  at  high  frequencies.  US  Elevator  claims  90% 
efficiency  with  good  power-factor  for  this  conversion  system.  The  great  advantage  of  course  is  that  it 
achieves  excellent  speed  feed-back.  Both  GE  and  Westinghouse  make  power  switching  transistors  md 
power  Darlingtons.  An  alternative  variable  speed  system  design  could  also  consider  hydraulics. 

Controller  Alternatives 

Controller  alternatives  will  be  discussed  under  titles  which  describe  the  technology  involved:  (a) 
electromechanical  and  hybrid  relays,  (b)  discrete  logic,  (c)  programmable  units,  (d)  all  solid-state 
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Fig.  12  —  Emergency  mode  comroli  for  lirge  weapons-elevaior  on  USS  AMERICA  (CVa-66) 
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relays.  In  rating  the  differing  technologies  the  following  factors  were  used;  (a)  reliability,  (b)  compata- 
bility  with  items  existing  in  the  supply  system,  (c)  supportabiiity  over  a  twenty-year  life,  (d)  standardi¬ 
zation,  (e)  maintainability,  (f)  safety  including  fail-safe,  electromagnetic  interference,  and  safety  system 
permissive.  The  safety  requirements  of  operation  in  a  hazardous  environment  will  be  considered  later 
in  the  report.  Reliability  calculations  to  MIL-HD8K-217C  are  summarized  in  a  section  which  follows 
the  general  discussion.  Input  signal  conditioning  from  proximity  switches,  push  buttons,  etc.,  and  out¬ 
put  drivers  are  treated  differently  in  general  by  every  designer  and  manufacturer.  Because  of  this,  these 
subjects  have  been  separated  from  the  controller  alternatives  per  se  and  are  treated  in  the  sections 
which  follow  next. 

Input  Signal  Conditioning 

Methods  employed  to  condition  elevator  input  control  signals  are  as  follows.  Unidynamics  uses  a 
small  capacitor  at  the  input  to  TTL  gates  to  filter  high  voltage  spikes  on  the  5  VDC  signal  lead.  There 
is  no  signal  voltage  shifting.  US  Elevator  uses  24  VDC  on  the  proximity  and  other  external  switches. 
They  voltage-level  shift  and  filter  the  signal  for  input  to  5  VDC  TTL  gates  as  shown  in  Fig.  13.  The 
General  Electric  Directomatic  II  input  is  level-shifted  (through  a  resistance  divider)  and  filtered  as 
shown  in  Fig.  14.  Applying  the  proper  voltage  to  the  appropriate  pin  will  make  the  normal  output  unity 
and  the  inverse  output  zero  and  vice  versa.  The  input  signals  are  not  self-supplied  so  that  an  open  cir¬ 
cuit  input  will  be  interpreted  as  zero.  Additional  external  capacitor  filtering  can  be  added  if  required  at 
the  terminal  labeled  CAP. 

Most  electromechanical  relay  systems  have  no  level-shifting  or  filtering.  Relay  coils  generally  are 
grounded  at  every  relay.  In  this  case  it  would  be  possible  to  obtain  a  degree  of  noise  rejection  provided 
both  coil  leads  were  passed  to  the  sensor  as  a  shielded  twisted  pair.  No  manufacturers  were  found  to 
use  common-mode  rejection  techniques  for  signal  inputs  despite  evidence  of  high  voltage  spikes  on  sig¬ 
nal  leads.  The  preferred  input  is  a  differential  device  such  as  an  opto-coupler,  input  transformer,  coil, 
or  differential  amplifier.  A  programmable  standard  electronic  module  controller  is  being  developed  by 
Naval  Weapons  Support  Center,  Crane,  Indiana  which  uses  opto-couplers  at  the  input.  This  approach  is 
recommended  as  being  the  preferred  input,  using  twisted,  shielded  pairs  for  signal  input  and  return. 

Output  Drivers 

Most  older  controllers  use  power  amplifiers  for  output  drivers  to  solenoids,  motor  controller  con¬ 
tactors,  etc.  (sometimes  via  auxiliary  relays).  The  output  amplifier  uses  an  emitter-follower  or  other 
technique  for  amplifying  power.  Voltages  are  generally  DC  and  may  or  may  not  be  the  same  as  logic 
voltages. 

More  recent  controllers  are  almost  universally  switching  to  solid-state  relays  similar  to  the  ones 
used  by  Puget  Sound  in  their  hybrid  relay  controller  and  made  by  Crydom.  Naval  Sea  Support  Center 
personnel  are  also  back-fitting  older  controllers  with  solid-state  relay  outputs  when  DC  amplifier  cards 
are  no  longer  serviceable. 

Certain  manufacturers  in  the  industry,  particularly  US  Elevator,  are  questioning  whether  this 
move  to  opto-coupled  output  triacs  is  in  the  interest  of  safety.  The  NASA  study  mentioned  earlier  con¬ 
cluded  that  silicone  controlled  rectifiers  (SCRs)  and  triacs  are  not  safe  to  use  in  human  vehicle  systems. 
Triacs  and  SCRs  have  features  which  can  cause  unprogrammed  turn-on.  In  one  case  there  is  a  capaci¬ 
tive  coupling  between  the  input  and  the  gate.  Input  line  voltage  spikes  having  a  critical  dv/dt  can  cause 
the  gate  to  turn  on.  Once  the  gate  is  turned  on  the  triac  can  only  be  turned  off  when  the  output 
current  goes  to  zero.  An  AC  output  could  therefore  be  turned  on  for  1/2  cycle.  This  normally  should 
not  effect  elevator  output  devices  such  as  solenoids  and  motors.  The  idea  of  automatic  turn-on  of  out¬ 
put  devices  is  disturbing,  however.  In  the  case  of  over-voltages  the  triac  can  also  automatically  turn  on; 
ie  ,  if  line  votage  transients  exceed  the  peak  voltage  rating  of  the  relay. 
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Extremely  careful  consideration  should  be  given  to  a  design  using  triac-based  solid-state  relays. 
Buffers  and  filters  may  need  to  be  provided  for  protecting  against  over-voltage  and  transient  frequency, 
(although  some  protection  is  usually  built  into  the  device)  and,  depending  on  the  application,  it  may  be 
necessary  to  install  heat  sinks  to  dissipate  heat  generated  at  the  SCR  junction.  None  of  the  solid-state 
relays  used  in  controllers  and  seen  during  the  visits  had  been  procured  to  MIL  Spec,  testing  (except  for 
Teledyne  relays  on  the  SEM  programmable  controller).  There  was  also  evidence  in  certain  cases  that 
unusual  occurrences  in  the  form  of  unexplained  starts  and  stops  were  happening  to  elevators  that  have 
commercial  solid-state  relays.  It  is  recommended  that  solid-state  relays  in  the  future  be  purchased  to 
MIL-R-28750  which  sets  up  requirements  and  tests  to  guard  against  malfunction  of  solid-state  relays  in 
the  naval  vessel  environment. 

US  Elevator  is  so  concerned  with  this  subject  that  it  has  decided  not  to  use  SCR  based  solid-state 
relays  or  output  triacs  in  the  future  on  passenger  elevators.  When  suitable  transistors  are  available  the 
technique  to  be  followed  uses  back-to-back  field  effect  transistors  (FETs)  which  have  greater  immunity 
to  noise  and  can  drive  either  AC  or  DC  output  loads. 

Another  controversial  topic  related  to  commercial  solid-state  relays  is  that  most  varieties  turn  on 
at  zero  voltage  and,  of  course,  turn  off  at  zero  current.  When  the  output  device  is  inductive  such  as  a 
solenoid  or  motor  contactor  coil,  the  zero-voltage  turn-on  feature  results  in  a  high  current  surge. 
Although  solid-state  relays  can  handle  current  surges  equal  to  ten  times  their  rated  current,  they  can 
usually  only  withstand  these  surges  for  a  limited  number  of  times  in  the  region  of  100.  To  guarantee  a 
surge  every  time  the  relay  is  turned  on  shortens  the  relay  life.  Ways  to  avoid  this  are,  (a)  to  use  a  ran¬ 
dom  turn-on  relay  (which  will  only  occasionally  surge  current  to  inductive  loads),  (b)  use  a  solid-state 
relay  that  turns  on  at  peak  voltage,  (c)  monitor  voltage  and  current  at  the  controller  and  schedule  turn 
on  to  minimize  current  surges  (most  simply  achieved  through  the  use  of  a  microprocessor).  The 
recommended  technique  between  these  three  would  depend  upon  the  sophistication  of  the  controller. 

Electromechanical  and  Hybrid  Controllers 

Most  older  elevator  controllers  use  electromechanical  relays  and  many  are  still  being  built  to  this 
day.  Westinghouse  Elevator  Company  is  one  firm  that  continues  to  make  new  relay  controllers, 
although  they  have  also  used  solid-state  transistor  and  dual-inline-plastic  (DIP)  technology  on  more 
sophisticated  equipment.  A  contact  at  Westinghouse  stated  that  the  Company  had  no  standard  elevator 
controller.  Each  elevator  manufactured  used  different  controller  technology  and  it  was  changing  week 
by  week. 

On  the  subject  of  whether  AC  or  DC  relays  should  be  used  it  was  found  that  most  systems  use 
DC  relays  on  the  grounds  of  higher  reliability.  Voltages  used  in  relay  controllers  vary  widely. 
Designers  in  general  have  no  basic  objection  to  AC  or  DC  but  most  favor  the  use  of  lower  voltages, 
i.e.,  below  24  V  for  safety  reasons. 

In  recent  years  a  number  of  hybrid  systems  have  been  built  which  use  electromechanical  relays 
for  logic  functions  and  solid-state  relays  for  output  drivers.  Although  readily  maintainable,  easy  to 
understand  and  having  long-term  supportability,  relay  systems  do  tend  to  have  lower  reliability  than 
solid-state  equivalents  and  the  particular  relay  controllers  in  mind  made  by  Puget  Sound  Naval  Shipyard 
have  not  been  in  service  for  a  sufficient  length  of  time  to  account  for  teething  problems  in  the  system 
or  to  gain  operational  experience  data. 

One  basic  problem  in  the  use  of  relay  controllers  is  contact  chatter  due  to  shock.  Most  relays 
tested  to  MIL-S-901  do  not  suffer  damage  as  the  result  of  shock  testing  but  change  state  during  the  pas¬ 
sage  of  the  shock  pulse.  Since  large  weapons  elevators  are  so  important  to  the  mission  and  survivability 
of  an  aircraft  carrier  it  is  desirable  that  elevators  continue  to  function  through  standard  shock  trials,  and 
do  not  lose  their  memory  or  otherwise  drop  out,  thereby  requiring  manual  intervention. 
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The  recommendation  is  made  that  controllers,  and  this  applies  to  all  controllers,  should  be  made 
transparent  to  short  duration  (20  ms)  shock  pulses.  More  will  be  said  on  this  subject  in  the  section 
entitled  Discussion  and  Recommendations. 

Although  many  companies  make  commercial  miniature  electromechanical  relays  (including 
Teledyne,  Potter  and  Brumfield,  T-Bar,  Omron,  Magnecraft,  North  American  Philips)  there  are  very 
few  companies  who  make  MIL  Spec,  tested  relays  that  are  suitable  for  the  application.  The  recommen¬ 
dation  is  made  that  relays  that  have  not  been  MIL  Spec,  tested  should  not  be  used  in  elevator  controll¬ 
ers. 


Two  electromechanical  relay  standard  electronic  modules  exist.  One  is  a  10  DPDT  key  code  RRF 
and  the  other  is  a  5  DPDT  key  code  RSP.  They  are  in  the  Teledyne  series  900.  At  the  present  time 
these  electromechanical  relay  SEM  modules  have  not  been  used  in  elevator  controller  design. 

One  form  of  electromechanical  device  that  could  be  used  in  a  controller  system  is  the  reed  relay. 
Discussions  with  Western  Electric  Inc.  on  methods  for  switching  telephone  circuits  revealed  that  ferrite 
reed  contacts  are  widely  used  as  logic  switches  in  telephone  systems.  There  are  many  manufacturers  of 
commercial  reed  relays  and  they  come  in  just  as  many  different  packages. 

Compared  to  standard  solid-state  logic  devices  reed  relays  offer  better  isolation  between  coil  and 
switch  circuits,  better  dielectric  strength  between  contacts,  longer  life  and  greater  reliability  [17J.  The 
best  relays  can  require  less  than  100  mW  of  coil  driving  power  and  switch  in  less  than  one  ms.  Break¬ 
down  voltages  for  unpressurized  miniature  reed  switches  is  300  to  400  VDC.  For  higher  voltage  appli¬ 
cations  (up  to  2000  VDC)  the  switch  atmosphere  is  pressurized  to  105Pa  (6  atm).  There  can  be  elec¬ 
trostatic  attraction  between  blades,  however,  at  high  voltages  and  high  frequencies.  This  attraction 
causes  vibrations  and,  at  resonant  frequencies,  the  voltage  hold-off  is  reduced  and  arcing  can  occur. 

In  relays  for  low-level  switching,  films  may  form  on  the  surface  of  the  contacts.  A  10  to  15  V  sig¬ 
nal  can  punch  through  the  polymer  surface  film,  but  the  surface  can  appear  open  at  lower  voltage  lev¬ 
els.  Polymer  films  will  generally  form  on  relay  contacts  within  the  first  few  million  operations.  One 
problem  related  to  the  contact  plating  is  that  spontaneous  cold  weld  or  stick  frequently  occurs  after 
about  ten  million  operations  at  frequencies  below  10  Hz.  There  is  always  low-level  noise  present  in  the 
millivolt  region  caused  by  the  bi-metallic  active  junction. 

Shock  and  vibration  standards  are  particularly  difficult  to  meet  for  reed  relays  but  a  successful 
controller  design  may  be  possible  with  proper  attention  to  time  delays  and  use  of  sample  and  hold  cir¬ 
cuits. 


Another  form  of  mechanical  relay  uses  mercury  as  the  element  that  is  attracted.  Although  some 
relays  using  mercury  have  inclination  limitations  the  most  recent  mercury  relays  make  use  of  surface 
tension  and  can  be  operated  in  any  position.  Mercury  relays  will  be  considered  no  further  in  this  report 
since  the  use  of  mercury  in  shipboard  equipment  is  banned,  except  for  special  case-by-case  approval, 
under  MIL-E-17807B. 

In  conclusion  on  electromechanical  relay  controllers,  it  was  found  that  there  was  much  support 
among  shipyard  and  support  center  personnel  for  relay  logic  controllers  and,  in  particular,  the  Puget 
Sound  Controller  experiment  was  enthusiastically  received. 

Discrete  Logic  Controllers 

Discrete  or  static-logic  controllers  were  discussed  at  the  Naval  Sea  Support  Centers,  Naval  Ship¬ 
yards  and  at  industrial  plants.  Alternatives  for  static  logic  systems  are  to  use  diode  and  transistor  logic 
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(DTL),  integrated  transistor  transistor  logic  (TTL),  complimentary  metal-oxide-silicone  logic  (CMOS), 
and  standard  electronic  module  elementary  logic  functions  (SEM). 

A  summary  of  comments  by  shipyard  and  support  center  personnel  is  as  follows.  They  were 
unanimous  in  agreeing  that  simple  logic  systems  were  preferred.  One  recommended  solution  was  to 
develop  a  controller  based  on  the  Cutler  Hammer  model  with  the  following  modifications:  (a)  use  TTL 
dual  inline  plastic  (DIP)  integrated  circuits,  (b)  use  solid-state  relays  for  solenoid  drivers,  (c)  use  sen¬ 
sors  with  positive  non-adjustable  on/off  characteristics  and  test  circuits  similar  to  ELDEC.  The  design 
of  inputs  to  withstand  high  transients  is  absolutely  necessary.  Switching  in  power  lines  causes  very  high 
power  current  di/dt.  Transient  voltages  on  signal  cables  have  been  measured  as  high  as  1000  V.  The 
consensus  on  signal  voltages  was  that  they  should  all  be  above  15  V.  Lower  voltage  systems  tend  to 
have  more  problems  for  one  reason  or  another. 

The  support  centers  have  noticed  that  ships  with  the  same  kind  of  controllers  frequently  have 
greatly  differing  experiences  in  maintaining  them.  In  particular  the  USS  EISENHOWER  which  has 
Cutler  Hammer  Controllers  and  the  FORRESTAL  which  has  PDP-14  controllers  have  experienced 
fewer  problems  than  others  in  the  same  classes.  This  is  clearly  a  function  of  the  training  and  motiva¬ 
tion  of  maintenance  personnel  and  the  attitude  of  officers  and  general  ship's  crew  morale. 

While  aboard  the  USS  NIMITZ  the  writer  abstracted  from  notes  written  by  an  elevator  mainte¬ 
nance  electrician  (Appendix  E).  This  Appendix  gives  a  good  indication  of  the  status  of  many  elevators 
aboard  the  major  aircraft  carriers.  Appendix  F  records  comments  made  by  electricians  mates  following 
a  weapons  elevator  inspection  aboard  the  USS  NIMITZ.  The  statements  made  in  this  Appendix  can  not 
be  overemphasized. 


Turning  now  to  discussions  with  the  elevator  controller  contractors,  the  first  attitude  statement 
comes  from  General  Electric  Control  Division,  Salem,  Virginia.  The  GE  Control  Division  designed 
and  built  Directomatic  II.  A  senior  executive  of  the  company  stated  that  since  the  Navy  wanted  only  a 
small  production  run  they  could  not  keep  the  design  and  manufacturing  group  together  and  was  forced 
to  let  them  go.  The  subject  is  still  a  very  sore  point  with  company  management  and  the  chief  engineer 
would  love  to  get  back  into  the  shipboard  elevator  controller  business;  but  company  policy  is  not  to 
respond.  The  senior  executive  felt  that,  in  any  event,  it  would  be  hard  to  make  a  comeback  since  they 
were  now  so  far  behind  the  competition. 

Contacts  at  Westinghouse  Elevator  Company  Inc.  referred  to  their  efforts  with  integrated  circuits. 
They  are  primarily  using  basic  logic  TTL  integrated  circuits  at  the  present  time.  CMOS  pilot  projects 
were  introduced  but  were  abandoned. 

At  Cutler  Hammer  it  was  found  that  they  were  building  static-logic  controllers  for  use  in  industry 
using  both  TTL  and  diode  transistor  logic  (DTL).  They  have  a  CMOS  programmable  controller  which 
has  found  application  in  oil  refineries  and  other  industries.  Cutler  Hammer  would  consider  using  mili¬ 
tarized  CMOS  in  ceramic  packages  for  future  static-logic  Navy  elevator  controllers. 

In  the  new  ladder-static-logic  (LSL)  system  lights  are  used  once  more  for  trouble  shooting  with 
the  lights  of  interest  being  selectable  by  a  switch.  Output  is  24  VDC  through  triacs,  reeds  or  solid-state 
relays. 

The  people  at  Unidynamics  Inc.  are  riding  a  success  story  with  their  TTL  controller  using  all 
NAND  gates  and  inverters.  They  have  installed  elevators  on  five  classes  of  Navy  ships  and  seven 
classes  of  commercial  ships  as  well  as  aboard  the  CONDEEP  Oil  Drilling  Platform  on  location  in  the 
Norwegian  sector  of  the  North  Sea.  They  specialize  in  elevators  designed  for  use  in  hazardous  environ¬ 
ments  which  will  be  discussed  later.  They  have  no  developmental  or  prototype  controllers  under 
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evaluation  and  plan  to  make  no  changes  to  their  controller  technology  at  this  time.  All  Unidynamics 
elevators  are  of  the  one-call-at-a-time  type,  i.e.,  the  elevator  completes  one  command  before  a  second 
call  is  accepted. 

Programmable  Units 

A  feasibility  study  was  conducted  by  M.  Rosenblatt  &  Son,  Inc.  in  1977  on  the  subject  of  aircraft 
carrier  weapons  elevator  split-hatch  control  [181.  This  study  found  that  the  only  significant  difference 
between  static-logic  and  programmable-logic  was  in  the  level  of  training  required  for  understanding,  and 
therefore  trouble-shooting.  It  was  found  that  since  the  static-logic  controller  was  somewhat  more  analo¬ 
gous  to  conventional  relay  logic,  it  was  more  likely  to  be  understood  by  personnel  trained  to  service 
electro-mechanical  systems.  The  programmable  system  would  require  some  knowledge  of  computer- 
type  controls  and  a  great  understanding  of  their  control  logic. 

This  same  sentiment  was  re-echoed  in  a  report  issued  by  Hunters  Point  Naval  Shipyard  [19],  The 
Hunters  Point  report  addressed  problems  on  the  USS  RANGER  which  uses  PDP-14  controllers  on  the 
major  weapons  elevators.  This  report  stated  that  maintenance  of  the  newer  elevator  controller  systems 
has  become  complex  with  the  introduction  of  static-logic  control  and  programmable  machine  control. 
Since  electricians  are  responsible  for  maintaining  these  complex  electronics  systems,  there  is  a  training 
gap.  In  addition,  some  of  the  fail-safe  features  are  very  confusing,  especially  the  cycling  of  doors  which 
must  be  performed  prior  to  new  dispatches. 

To  illustrate  the  complexity  of  a  programmable-logic  controller.  Appendix  G  has  been  extracted 
from  a  technical  manual  for  the  USS  INDEPENDENCE  (CV-62).  Figures  mentioned  in  Appendix  G 
can  be  found  in  the  original  technical  manual  — they  were  not  reproduced  here. 

There  are  some  AC  and  some  DC  inputs  to  the  controller.  Direct  current  inputs  from  the  prox¬ 
imity  switches  are  at  28  V.  Outputs  are  via  solid-state  intermediate  relays  to  handle  the  large  inrush 
currents  required  by  the  motor  contactor  solenoids. 

Of  particular  interest  is  the  list  of  timer  functions  which  is  unique  to  this  form  of  elevator  con¬ 
troller.  To  extract  two  timing  functions  at  random,  if  a  hatch  does  not  open  or  close  in  35  s,  or  a  lock- 
bar  lock  or  unlock  in  5  s,  the  controller  shuts  down  automatically.  To  an  electrician  looking  for  an 
elevator  problem  it  is  often  hard  to  understand  that  wear  in  hydraulic  cylinders,  which  slows  down  the 
speed  of  operation  of  a  hatch,  can  be  the  cause  of  the  malfunction. 

Another  unique  feature  of  this  elevator  system  is  the  encoder  subsystem  comprising  the  encoder 
interface  unit,  power  supply,  nixie  tube  display,  equality  detector,  comparator,  matrix  driver,  and  diode 
matrix  pin  board.  Although  it  reduces  the  number  of  sensors  in  the  elevator  shaft,  the  encoder  subsys¬ 
tem  presents  new  experiences  for  the  electrician  by  using  technology  which  is  beyond  his  training  and 
by  having  failure  modes  which  are  extremely  difficult  to  track  down  to  the  encoder.  The  present 
encoder  is  of  the  printed  circuit  board  type.  A  fault  relating  to  the  brushes  and  printed  circuit  traces 
can  take  two  or  three  days  to  locate  using  simple  equipment,  in  the  author's  personal  experience.  More 
reliable  encoders  are  now  available.  It  is  recommended  that  consideration  be  given  to  using  optical 
encoders  when  printed  circuit  board  encoders  are  replaced. 

The  PDP-14  control  unit  itself  is  entirely  commercial.  Plastic  DIP  integrated  circuits  are  used  and 
there  is  no  testing  to  military  shock  and  vibration  specifications  of  the  unit  itself.  To  meet  shock  and 
vibration  requirements  the  unit  is  supported  by  flexible  isolators.  This  is  not  the  preferred  route  to  take 
if  it  can  be  avoided.  In  the  vibration  standard  MIL-STD-167,  testing  is  required  to  establish  resonant 
frequencies  and  the  unit  vibrated  at  those  resonant  frequencies  for  two  hours.  Since  all  flexible  mounts 
have  resonance  frequencies,  despite  damping  which  may  be  present,  mountings  designed  to  enable 
equipment  to  pass  the  shock  requirements  frequently  run  into  difficulties  during  the  vibration  tests. 
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The  preferred  method  is  to  design  the  equipment  itself  to  withstand  shock  and  vibration  requirements 
of  the  building  specifications. 

In  programmable  controllers  there  are  four  principal  directions;  (a)  commercial  controllers,  (b) 
commercial  microprocessors,  (c)  a  microprocessor  built  entirely  from  NAND  gates  in  the  form  of 
small-scale  integrated  circuits,  (d)  standard  electronic  module  controllers. 

Commercial  controllers  which  have  been  used,  and  the  standard  electronic  module  controller,  will 
be  discussed  more  fully  in  the  next  section  on  potential  shipboard  controllers.  Remarks  below  on  the 
different  types  of  programmable  units  are  intended  to  be  more  in  the  nature  of  general  comments  based 
on  the  visits  and  contacts. 

(a)  Commercial  Controllers 

The  dividing  line  between  commercial  programmable  controllers,  microcomputers  and  micropro¬ 
cessors  is  becoming  blurred  sincf  the  industrial  controllers  utilize  commercial  microcomputers  or 
microprocessors  and  some  microprocessor  integrated  circuits  have  controller  output  architecture.  A 
recent  article  in  Electronic  Design  Magazine  [20]  lists  109  single-board  microcomputer  systems  and  107 
microcomputer  operating  systems  which  could  all  be  applied  to  the  elevator  controller  problem. 

From  this  list  of  logical  unit  manufacturers,  contact  was  made  with  Digital  Equipment  Corporation 
(DEC)  because  of  their  previous  relationship  with  the  PDP-14  elevator  controller  systems.  Obsoles¬ 
cence.  provisioning  and  long-term  support  was  discussed  for  company  products.  It  was  asked  why  new 
technology  could  not  be  incorporated  in  such  a  manner  that  board  size  and  pin  compatibility  was  main¬ 
tained.  The  name  given  to  this  interchangeability  of  technology  is  technical  insertion.  Corporate  policy 
of  DEC  is  to  not  design  for  technical  insertion  in  order  to  promote  the  market  for  new  products.  Sup¬ 
port  for  five  years  is  the  maximum  they  would  agree  to  with  possible  provisioning  for  ten  years.  This 
attitude  towards  fast  depreciation  and  renewal  of  equipment  was  found  to  be  common  throughout  all 
commercial  logical  unit  and  controller  manufacturers.  Military  versions  of  DEC  equipment  are 
manufactured  by  Norden.  Supportability  of  this  equipment  after  ten  years  will  most  likely  be  depen¬ 
dent  upon  the  initial  stocking  of  parts.  No  commercial  programmable  controller  system  can  be 
expected  to  meet  the  twenty  year  supportability  requirement  of  this  study. 

(b)  Commercial  Microprocessors 

The  market  in  microprocessor  development  has  bloomed  in  recent  years  to  the  extent  where  an 
article  in  Electronic  Design  [21]  can  review  over  104  different  processors.  Many  general-purpose 
microprocessors  are  reviewed  in  addition.  Nineteen  companies  are  now  making  all-in-one  processors  in 
a  variety  of  technologies  including  NMOS,  PMOS  and  CMOS.  Companies  which  have  been  considering 
microprocessors  for  elevator  control  in  addition  to  US  Elevator  include  Westinghouse  and  Otis. 

Westinghouse  has  been  considering  microprocessors  for  the  control  of  high-speed  gearless  systems 
aiming  at  the  market  18  mo  from  now.  The  Westinghouse  contac  said  that  in  selecting  the  production 
microprocessor  it  would  be  necessary  to  locate  a  locked-in  supplier  of  the  microprocessor  for  40  years. 
This  will  be  no  easy  task.  Discussions  with  the  chief  of  research  at  Otis  determined  that  they  also  were 
considering  the  use  of  microprocessors  for  elevator  com. oilers.  The  principal  advantages  of  employing 
microprocessors  were  cheapness  in  initial  cost  and  the  use  of  less  space.  It  was  recommended  that  for 
shipboard  use  the  Navy  should  stay  away  from  highly  sophisticated  systems  and  keep  elements  easily 
understood  and  maintainable. 

One  application  of  a  microprocessor  used  to  control  elevators  is  given  in  Digital  Design  Magazine 
[22].  A  conceptualized  design  is  described  for  a  13  level  elevator  using  a  Motorola  6800  microprocessor 
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with  1024  bytes  of  ROM  and  128  bytes  of  RAM.  There  are  four  stages  of  shift  register.  Buttons  are 
accompanied  by  an  LED  indicator  which  is  used  by  the  microprocessor  to  acknowledge.  Doors  are 
operated  manually  by  the  passengers. 

In  the  control  algorithm,  the  car  stops  to  answer  both  car-stop  requests  and  car-call  requests 
registered  in  the  car  direction  of  travel,  in  floor  sequence.  When  no  more  requests  of  either  type  are 
registered  in  the  direction  ahead  of  the  car,  the  car  moves  to  the  furthest  floor  at  which  a  car  call  for 
traveling  in  the  opposite  direction  is  registered  (if  any),  reverses  its  direction  of  travel  and  starts 
answering  calls  in  the  new  direction. 

(c)  Microprocessors  Built  Entirely  From  Small-Scale  Integrated  Circuits 

This  technique  was  suggested  by  designers  at  US  Elevator  as  a  means  for  overcoming  the  obsoles¬ 
cence  of  present  microprocessors  while  still  retaining  the  sophistication  and  flexibility  of  a  dynamically 
programmed  controller.  Only  two  active  component  types  would  be  necessary  in  such  a  system:  the  741 
operational  amplifier  and  the  TTL  7400  quad  2-  input  NAND  gate.  Such  a  controller  would  be  much 
larger  than  a  microprocessor  controller  but  would  be  far  easier  to  trouble-shoot  and  the  logistics  burden 
in  the  supply  system  would  be  kept  to  a  minimum.  Suitable  wire-wrap  boards  which  could  be  used  with 
this  fabricated  microprocessor  are  manufactured  by  Standard  Logic  Inc.  Two  power  supplies  would  still 
be  used:  one  for  logic  and  the  other  for  sensors  and  external  commands. 

(d)  SEM  Controllers 

A  logical  extension  of  the  standard  electronic  module  program  is  to  develop  a  programmable  con¬ 
troller  built  from  SEM  modules.  Such  a  controller  has  been  developed  by  the  Naval  Weapons  Support 
Center,  Crane,  Indiana,  and  is  presently  being  evaluated  aboard  the  aircraft  carrier  USS  KITTY  HAWK 
(CVA-63)  on  lower-stage  elevator  number  3. 

Great  care  was  taken  in  the  design  and  assembly  of  the  SEM  controller  to  ensure  that  all  com¬ 
ponents  and  assemblies  meet  relevant  military  specifications  such  as  MIL-N-38510  for  microcircuits  and 
MIL-E-16400  for  other  testing  of  electronic  equipment.  Proper  isolation  of  input  and  output  was 
achieved  using  optically  coupled  devices,  front  end  rectification,  and  capacitive  filtering  for  noise.  An 
earlier  SEM  version  of  the  PDP-14  also  was  evaluated  aboard  the  KITTY  HAWK. 

All  Solid-State  Relay  Controllers 

One  alternative  for  fabrication  of  the  logic  controller  is  to  use  integrated  circuits  in  the  form  of 
CMOS  or  TTL  analog  switches.  The  logic  unit  could  also  be  made  entirely  of  opto-couplers.  When  the 
components  of  the  controller  have  been  selected  they  could  be  established  as  SEM  units  and  thereby 
take  advantage  of  the  SEM  qualified  products  list.  Such  SEM  modules  could  be  developed  for  both 
logic  and  power  solid-state  relays.  Analog  switches  in  integrated  circuit  form  are  a  recent  addition  to 
the  electronic  product  line  but  are  now  made  by  a  number  of  major  companies  including  Intersil. 
Harris,  PMI  and  Siliconix.  Manufacturing  technology  of  the  circuits  varies  between  the  manufacturers 
but  many  components  are,  or  can  be,  made  interchangeable. 

In  the  case  of  opto-couplers  a  number  of  industry  standards  exist  and  many  manufacturers  are  in 
the  area  such  as  Motorola,  General  Electric,  Optron,  Fairchild,  Monsanto/General  Instruments. 
Honeywell/Spectronics,  and  Theta-J.  Opto-couplers  are  provided  with  a  variety  of  outputs  including 
Triacs,  SCR,  bipolar  junction  and  field-effect-transistor.  They  have  LEDs  or  other  light  emitting 
sources  at  the  input. 

Miniature  printed  circuit  board  opto-coupled  solid-state  relays  featuring  MOS  outputs  generally 
have  advantages  over  triacs  by  virtue  of  having  greater  immunity  to  voltage  rate  effect  thus  eliminating 
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RC  snubbers.  They  generally  are  more  immune  to  high-temperature  latch-up  and  varieties  are 
manufactured  that  will  not  turn  on  under  25  ms  thus  eliminating  much  radio  frequency  interfetence. 
Excessive  instantaneous  dissipation  cannot  cause  runaway  as  with  bipolar  transistor  products,  since  out¬ 
put  current  is  controlled  by  gate  current  and  current  surges  are  prevented. 

In  addition  to  switching  applications  opto-isolators  can  be  used  as  differential  amplifiers  and  are 
ideal  for  logic  interfacing  123],  Opto-devices  can  isolate  different  voltage  levels,  prevent  interference 
between  control  circuits  and  the  power  circuits,  insulate  people  or  low  voltage  circuits  from  high  voltage 
shock,  eliminate  DC  ground  loops,  amplify  or  attenuate  signals,  in  addition  to  performing  on-off 
switching.  Basically  all  devices  incorporate  an  infrared  emitter  and  use  two  LEDs  in  parallel  for  AC 
applications.  The  output,  which  is  generally  a  photo-SCR  or  silicon  photo-transistor,  sometimes  in  Dar¬ 
lington  formation,  can  also  be  a  photodiode  with  Schmidt  trigger  integral  to  the  integrated  circuit  pro¬ 
viding  a  TTL  compatible  interface. 

A  number  of  commercial  manufacturers  make  solid-state  relays  suitable  for  controller  output 
currents  in  the  10  A  range  and  having  life  cycles  to  failure  of  about  107  operations.  The  companies 
include  Crydom,  Douglas  Randall,  Elec-trol,  Electromatic.  Electronic  Instrument  and  Speciality  Cor¬ 
poration,  Gordos,  Grayhill,  Guardian  California,  Hamlin,  Magnecraft.  Omron,  Potter  and  Brumfield, 
Teledyne,  and  Theta-J.  Solid-state  timers  and  delay  pull-in  and  drop-out  relays  are  manufactured  by 
Omron  and  Artisan  Electronics  among  others. 

Some  of  the  manufacturers’  products  are  tested  to  MIL-STD-202  for  shock  and  vibration  but.  in 
general,  solid-state  relays  available  commercially  do  not  meet  the  requirements  of  a  full  MIL-SPEC 
testing  program.  For  example,  testing  to  MIL-R-28750A  for  transient  voltage  and  voltage  spikes  is 
rarely  mentioned  in  manufacturer’s  literature.  Because  of  this,  the  advantages  of  developing  logic  or 
output  solid-state  relay  modules  under  the  SEM  program  cannot  be  over-emphasized.  In  the  case  of 
the  all  solid-state  relay  controller  the  use  of  SEM  modules  also  simplifies  logistics  support  requirements, 
provides  flexible  intra-module  packaging  requirements,  achieves  a  coordinated  maintenance  policy,  and 
ensures  high  reliability  though  quality  assurance  requirements  [24]. 

Because  of  rapid  obsolescence  of  electronic  technology,  maintenance  aboard  ships  generally  is 
effected  at  the  component  level.  This  would  seem  to  discourage  the  use  of  throw-away  cards,  with  con¬ 
centration  on  components  expected  to  be  available  for  20  years.  Nevertheless  there  is  much  to  recom¬ 
mend  the  use  of  items  from  the  standard  electronic  modules  listing,  since  these  items,  although  stand¬ 
ardized  at  the  electronic  function  level,  are  procured  in  such  a  way  from  multiple  sources  that  they 
have  a  potential  availability  and  survivability  for  20  years. 

Controller  Reliability  and  Other  Selection  Criteria 

Controller  selection  criteria  include  reliability,  maintainability,  supportability,  standardization, 
training  needs,  ability  to  meet  military  specifications  and  life-cycle  costs.  This  section  deals  mostly  with 
reliability  since  other  items  are  rather  nebulous  to  evaluate  and  involve  qualitative  judgments  on  the 
part  of  the  writer. 

Reliability  and  maintainability  are  two  items  (involving  one  which  is  easy  to  assess  and  one  which 
is  numerically  difficult)  which  should  be  considered  together.  If  a  system  is  low  in  reliability  but  can  be 
repaired  easily  and  quickly,  with  parts  readily  available,  then  the  total  availability  of  the  system  can  be 
optimized  at  lower  reliability. 

Commonly  used  terminology  in  this  section  includes  mean-cycles  between  failure  (MCBF), 
mean-time  between  failure  (MTBF)  and  mean-time  to  repair  (MTTR).  In  terms  of  these  factors  total 
casualties  (N)  —  time/MTBF,  and  down-time  “  MTTR  x  N.  These  equations  neglect  much  of  the 
composition  of  up-  and  down-time,  which  can  be  better  appreciated  by  examining  Table  5.  Reliability 
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Table  5  —  Composition  of  Elevator  Controller  Up-  and  Down-Time 


Supportability  Lifetime  ' 

Availability  up-time 

Downtime 

Standby  time 

Operational  time 

I 

Preventive- 
maintenance  time 

System 

ready 

time 

Light 

duty 

period 

(Dockside) 

Heavy 

duty 

period 

(sea 

exercises) 

Problem 

diagnosis 

(fault 

isolation) 

Obtaining/ 
ordering  parts 
(supply  delays) 

Repair 

time 

Recalibration 
and  post- 
repair 
testing 

calculations  were  performed  in  detail  for  certain  types  of  controller/sensors  subsystem,  to  the  parts- 
count  prediction  model  described  in  MIL-HDBK-217C  (Appendix  C). 

This  model  generally  uses  the  component  failure  rate  per  106h  as  the  basis  of  calculation.  When 
part  failure  rate  can  be  considered  constant  over  the  time  period  of  interest  the  exponential  function 
permits  the  addition  of  failure  rates  for  series  elements.  In  the  present  calculation,  to  make  results 
more  realistic  in  the  opinion  of  the  writer,  failure  rates  on  elements  which  are  cycle  sensitive  such  as 
push-buttons  and  electromechanical  relays  were  calculated  on  the  basis  of  cycle  rate  as  described  under 
the  part-stress  analysis  model  of  MIL-HDBK-217. 

Duty  cycle  information  used  for  elevators  was  as  follows.  An  average  of  24,000  dispatches  per 
year  or  612  running  hours  per  year  per  elevator  was  calculated  from  information  given  on  in-port  active 
and  inactive  periods  and  at-sea  exercise  and  non-operational  periods.  This  information  results  in  aver¬ 
age  cycle  rates  of  six  cycles  per  hour  being  used  for  relays  and  three  cycles  per  hour  for  push-buttons. 

Reliability  data  for  cycle-sensitive  components  are  summarized  in  Table  6.  Reliability  data  for 
other  components,  which  are  assumed  to  be  time-sensitive,  are  taken  from  MIL-HDBK-217  for  naval 
sheltered  environment  (NS)  and  listed  in  Table  7. 


Table  6  —  Reliability  Data  for  Cycle-Sensitive  Components 


Part  category 

Failure  rate 

Failures/million  hours 

Cycles 

per 

hour 

MIL-STD 

Commercial 

Relays  logic  6PDT 

17.400 

104.20 

6 

Relays  logic  SPDT 

3.800 

22.80 

6 

Relays  contactor  SPDT 
(5-20  amp) 

1.080 

9.77 

6 

Relays  time  delay 

3.88  est. 

25.60  est. 

6 

Push-buttons  (non  snap) 

0.150 

2.29 

3 

Solenoid  valve 

1.0  est. 

9.0  est. 

Alarm  Bell 

1.0  est. 

9.0  est. 

Under  the  parts  count  method  of  computing  reliability,  cumulative  failure  rates  are  obtained  by 
summing  for  all  parts  catagories  the  number  of  parts  multiplied  by  the  failure  rate  for  each  parts 
category.  Quality  factors  have  already  been  incorporated  into  Tables  6  and  7  to  differentiate  between 
commercial  and  MIL-STD  reliability. 
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Table  7  —  Reliability  Data  for  Time  Sensitive  Components 


Part  Category 

Failure  rate 

Failures/million  hours 

MIL-STD 

Commercial 

Digital  1C  4  gate  TTL 

0.046 

6.97  Hermetic 

13.95  Plastic 

Digital  IC  40  gate  TTL 

0.085 

12.75  Hermetic 

25.50  Plastic 

Digital  IC  400  gate  TTL 

0.245 

36.75  Hermetic 

73.50  Plastic 

Digital  IC  4000  gate  TTL 

16.500 

2475.00  Hermetic 

4950.00  Plastic 

ROM  2K  bytes  TTL 

0.205 

30.75  Hermetic 

61.50  Plastic 

RAM  2K  bytes  TTL 

0.720 

108.00  Hermetic 

216.00  Plastic 

Digital  IC  4  gate  MOS 

0.070 

10.50  Hermetic 

21.00  Plastic 

Digital  IC  40  gate  MOS 

0.215 

32.25  Hermetic 

64.50  Plastic 

Digital  IC  400  gate  MOS 

0.850 

127.50  Hermetic 

255.00  Plastic 

Digital  IC  4000  gate  MOS 

64.000 

9600.00  Hermetic 

19200.00  Plastic 

ROM  2K  bytes  MOS 

0.750 

1 12.50  Hermetic 

225.00  Plastic 

RAM  2K  bytes  MOS 

2.625 

393.75  Hermetic 

787.50  Plastic 

Linear  <  32  transistors 

0.080 

12.00  Hermetic 

24.00  Plastic 

Linear  33-100  transistors 

0.175 

26.25  Hermetic 

52.50  Plastic 

Transistors  Si  NPN 

0.026 

2.60 

Transistors  Si  PNP 

0.041 

4.10 

Diodes 

0.009 

0.09 

Zener  diodes 

0.022 

2.20 

LED 

0.050 

4.50 

Thyristers 

0.040 

4.00 

Resistors 

0.026 

0.08 

Variable  resistors 

4.800 

14.40 

Capacitors 

0.029 

0.09 

Variable  Capacitors 

4.200 

12.60 

Electrolytic  capacitors 

0.960 

2.88 

Transformer  audio 

0.034 

0.10 

Transformer  RF 

0.140 

0.42 

Transformer  power 

0.130 

0.39 

Coils  RF 

0.010 

0.03 

Connections  per  pair 

0.053 

0.16 

PC  Board  (2  sides) 

0.005 

0.005 

Fuses 

0.1 

0.1 

Lamps  neon 

0.2 

0.2 

Lamps  incandescant 

1.0 

1.0 

Circuit  breakers 

2.0 

2.0 

Meters 

10.0 

10.0 

Connections: 

Wire  wrap 

0.0000075 

0.0000075 

Wave  solder 

0.00043 

0.00043 

Hand  solder 

0.0078 

0.0078 

Crimp 

0.00078 

0.00078 
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Calculated  reliabilities  for  assemblies,  such  as  solid-state  relays,  power  supply,  and  a  variety  of 
sensors  and  common  subassemblies  are  presented  in  Table  8.  Controller  system  common  sensor  and 
elements  selected  for  further  study  included  74  push  buttons,  80  indicator  lights,  three  safety  elec¬ 
tromechanical  limit  switches,  60  eddy  current  proximity  switches,  18  solenoid  valves  and  one  alarm 
bell. 


Calculated  reliabilities  for  a  variety  of  controller/sensor  subsystem  types  are  shown  in  Table  9. 
Reliability  of  the  common  elements  including  the  sensors  is  significant  in  all  cases  and  can  actually 
dominate  in  the  case  of  the  programmable  controller.  The  controller  types  fit  into  three  reliability 
groupings.  Electromechanical  relay  and  hybrid  relay  controllers  have  about  the  same  reliability  which  is 
lower  than  discrete  logic  and  programmable  controllers  which  also  have  about  the  same  reliability.  All¬ 
solid-state  relay  controllers  fall  in  between  in  both  reliability  and  ease  of  maintenance.  The  large 
difference  between  MIL-STD  and  commercial  mean-time-between-failure  emphasizes  the  liability  of 
using  commercial  components  aboard  Navy  ships. 

The  question  now  arises  (relating  to  reliability)  on  how  much  an  elevator  system  can  be  con¬ 
sidered  redundant.  If  people  are  always  available  to  make  repairs  and  repairs  do  not  interfere  with  the 
operation  of  the  ship,  then  calculated  mean-time-between-failure  is  meaningless.  Availability  can  be 
calculated  from  the  relationship  MTBF/(MTBF  +  MTTR).  If  failed  controller  components  can  be 
manually  replaced  quickly  then  the  reliability  approach  is  that  of  a  redundant  system  with  component 
reliabilities  in  parallel.  A  study  of  the  reliability  of  components  and  systems  in  parallel  has  been  made 
by  Feller  [251. 

For  a  total  of  N  nonidentical  systems  in  parallel  each  with  availability  .4,.  A 2  etc.,  the  availability 
of  at  least  K  systems  can  be  obtained  from  the  following  formula  for  overall  availability  A. 

A  -  CK'KSU()  +  CXK+]  S(K  4-  1)  +  Q.x  +2  S(,K  +  2)  +  +  Q.v  S(.V) 

where 

r  <-  l)(*  +  -v)  (N-\)\ 

KS~  {N  -  AT)!  (K  -  D! 

S(l)  =  A\  +  A,  +  A]  +  +  Av 

S(2)  -  A, A 2  +  A,A}  +  +  A,Ay  +  A2A}  +  + 

S(N)  -  AlA2A}  ...Aw 

K  must  be  less  than  N. 


To  take  a  simple  example,  when  three  parallel  systems  all  have  equal  availability  of  0.75  and  only 
one  must  function  for  successful  operation,  then  k  =  1,  N  =  3,  and  A,  -  A2  **  A}  —  0.75.  The 
overall  availability  A  of  any  one  from  the  three  is  0.984.  This  parallel  availability  can  be  achieved  either 
by  the  provision  of  actual  duplicate  elements  and  automatic  failure  sensing  or  through  manual  interven¬ 
tion  provided  the  mean-time-to-repair  is  short.  It  also  shows  that  simple  systems  with  lower  reliability- 
in  Table  9  are  not  necessarily  those  with  lower  availability. 

Taking  into  account  all  of  the  rating  factors.  Table  10  was  compiled  as  an  overall  evaluation  of 
controller  types.  In  Table  10,  the  relative  strengths  under  the  column  Life-cycle  Costs  were  taken  from 
the  controller  study  evaluation  summary  by  Cox  [26], 

Although  the  values  in  Table  10  are  extremely  qualitative,  it  is  felt  that  they  represent  a  true 
reflection  of  the  relative  merit  in  selecting  each  type  of  elevator  controller.  Although  the  all  solid-state 
relay  controller  system  came  out  on  top,  there  is  little  to  choose  between  any  of  the  controller  types 
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Table  8  —  Calculated  Reliabilities  for  Assemblies 
and  Common  Subassemblies 


— - 

Assembly  or 

Failure  rate 

Failures/million  hours 

Subassembly 

MIL-STD 

Commercial 

Solid-state  logic  relay  6PDT 

2.70 

164.00  plastic 

4  resistors 

2.56  without  LED's 

92.00  hermetic 

4  capacitors 

3  LED  indicators 

6  linear 

1  diode 

100  connections 

79.10  hermetic  without  LED’s 

Solid-state  output  relay  SPST 
(zero  volts  turn  on) 

I  LED 

1  thyristor 

5  capacitors 

1  varistor 

4  resistors 

1  photo  transistor 

1  digital 

2  linear 
connections 

1.0 

44.30 

Solid-state  output  relay  SPST 
(random  turn  on) 

1  LED 

2  thyristors 

2  capacitors 

1  resistor 
connections 

0.21 

13.00 

Variable  reluctance  (IC) 
proximity  switch 

2  coils 

1 1  resistors 

4  linear 

6  capacitors 

2  digital  IC 

1  PCB 

100  connections 

1.93 

127.00  TTL  plastic 

] 

Table  continues 
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Table  8  —  Calculated  Reliabilities  for  Assemblies 
and  Common  Subassemblies  (Concluded) 


Assembly  or 

Failure  rate 

Failures/ million  hours 

Subassembly 

MIL-STD 

Commercial 

Eddy  current  (1C) 
proximity  switch 

2  resistors 

1  coil 

2  capacitors 

1  MSI  IC 

1  transistor 

1  zener  diode 

PCB 

connections 

0.42 

70.00  MOS  plastic 

Variable  reluctance 
(discrete  components) 
proximity  switch 

1  variable  resistance 

26  resistors 

10  capacitors 

6  transistors 

1  lamp  incandescent 

5  diodes 

1  zener  diode 

1  transformer 

3  coils 

1  PCB 

100  connections 

8.10 

42.4 

Power  supply 

1  transformer 

4  capacitors 

10  resistors 

40  soldering  joints 

10  crimping  joints 

2  fuses 

4.75 

13.2 

Controller  system  sensor  and 
common  elements: 

74  push  buttons 

80  indicator  lights 
(tungsten) 

3  EM  safety  limit  switches 

60  proximity  switches 
(eddy  current) 

18  solenoid  valves 

1  alarm  bell 

147.30 

4695.00 

. 
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Table  9  —  Calculated  Reliabilities  for  Controller/Sensor  Subsystem 


Logic  controller 

Controller  “  Controller 
only 

System  -  sensor  and 
other  common  elements 
plus  controller 

F 

Failure 

ailure  rate 
s/million  hours 

M 

TBF 

i 

MIL-STD 

Commercial 

MIL-STD 

Months 

Commercial  j 
Days 

Electro-mechanical  relay  controller 

Controller 

922.6 

5567 

1.5 

7 

48  6PDT  relays 

System 

1070.0 

10262 

13 

4 

2  time  delay  relays 

4  output  SPOT  relays 

: 

1  power  supply 

18  solenoid  driver  relays 

i 

100  solder  joints 

Hybrid  relay  controller 

Controller 

870.5 

6040 

16 

7 - ! 

48  6PDT  relays 

System 

1018 

10735 

14 

*  j 

2  time  delay  relays  SPDT 

| 

4  output  SS  relays  SPDT 

i 

1  power  supply 

, 

18  solenoid  driver  SSR  relays 

100  solder  connections 

1 

All  solid-state  relay  controller 

Controller 

155  S 

4943 

89 

8 

50  6PDT  relays 

System 

302.8 

9638 

4.6 

4 

4  output  SSR’s 

i 

1  power  supply 

I 

18  solenoid  driver  SSR's 

1 

100  solder  connections 

Discrete  logic  controller 

Controller 

31.4  TTL 

1657  TTL  Hermetic 

44  2 

25 

96  4  gate  digital  1C 

Controller 

2327  TTL  Plastic 

18 

4  output  SSR's 

Controller 

33.7  MOS 

3003  MOS  Plastic 

41  2 

14 

18  solenoid  driver  SSR's 

System 

183.7  TTL 

6352  TTL  Hermetic 

78 

1  power  supply 

System 

7022  TTL  Plastic 

b 

640  wave  solder 

System 

181.0  MOS 

7698  MOS  Plastic 

7.7 

s 

Programmable  controller 

1  4000  gate  digital  1C 

Controller 

47.1  TTL 

3949  TTL  Hermetic 

29  5 

10  i 

3  2K  byte  ROM 

Controller 

6909  TTL  Plastic 

t> 

3  2K  byte  RAM 

System 

194.4  TTL 

8644  TTL  Hermetic 

7> 

5 

10  buffers 

System 

11604  TTL  Plastic 

4  , 

4  output  SSR’s 

| 

18  solenoid  driver  SSR’s 

1 

1  power  supply 

l 

1  wave  solder 

i 
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evaluated.  This  final  evaluation  still  reflects  the  advantage  of  using  MIL-STD  quality  in  preference  to 
commercial. 

POTENTIAL  SHIPBOARD  CONTROLLERS 

In  this  section,  established  commercial  controllers  and  the  SEM  controller  will  be  presented  in 
more  detail  with  some  comments  on  other  types.  A  list  of  manufacturing  companies  consulted  in  con¬ 
nection  with  control  systems  is  given  in  Appendix  H. 

In  looking  at  commercial  sytems,  evidence  was  collected  which  would  fit  in  with  the  existing  rat¬ 
ing  criteria  used  elsewhere  in  this  report  i.e.,  to  maximize  reliability,  maintainability,  equipment  suppor- 
tability,  standarization,  fail-safe  or  fail-soft  operation,  and  explosion-proof  operation.  Other  factors  con¬ 
sidered  included  human  interface  problems  and  overall  life-cycle  cost.  Particular  attention  was  paid  to 
trouble-shooting  aids  for  fault  isolation  and  detection. 

The  present  line  of  Cutler  Hammer  products  includes  the  Ladder  Static  Logic  (LSL)  controller 
and  the  D120  programmable  controller.  The  LSL  system  is  an  outgrowth  of  the  older  Cutler  Hammer 
static  logic  systems;  but  modules  are  more  closely  identified  with  relay  functions.  A  front  view  of  a 
typical  LSL  control  panel  is  shown  in  Fig.  15. 

Standard  logic  boards  are  provided  such  as  normally  open  contacts  (8  pairs  per  board),  normally 
closed  contacts  (8  pairs  per  board),  timer  coil  (4  per  board),  latch  coil  (4  per  board),  control  coil  (12 
per  board),  monitor  driver,  master  control  and  output  driver.  Inputs,  outputs  and  coil  functions  are 
monitored  by  means  of  lights.  LEDs  are  used  for  logic  monitoring  and  neon  lights  for  external  high- 
voltage  monitoring.  Power  supplies  are  5  VDC  and  24  VDC.  Limit  switches  and  solenoids  operate  on 
24  VDC.  The  boards  have  keyed  sockets  to  eliminate  the  chance  of  error.  Switch  outputs  are  by 
means  of  power-reed. 

The  D120  programmable  controller  uses  relay  logic  to  the  outside  world  by  means  of  a  ladder 
diagram  with  only  three  instructions.  Printed  circuit  boards  are  provided  for  the  6  V  power  supply, 
memory,  control,  115  VAC  input  (10—2  mA  per  board),  115  VAC  output  (10—2  A/10  A  inrush  per 
board),  timer  (5  per  board,  0.05  —  250  s),  latch  (5  per  board),  stepper  (10  steps),  flow  sequencer,  and 
filler  blank  board. 

The  programmable  controller  uses  CMOS  logic.  The  random  access  memory  (RAM)  has  a  back¬ 
up  pack  to  maintain  memory  for  30  days  during  power  outage.  Programmable  read  only  memory 
(PROM)  which  is  also  used  will  maintain  memory  indefinitely.  The  system  is  modular  and  can  accom¬ 
modate  special  functions  as  required.  Up  to  1000  words  of  RAM  or  PROM  memory  are  available 
which  permits  up  to  400  relay  coil  equivalences  with  no  limit  on  contacts  and  400  input/output  devices. 

The  equipment  is  designed  for  high  industry  environmental  standards  without  special  ventilation 
or  cooling.  It  meets  the  1500  V  showering  arc  noise  test  for  NEMA  noise  immunity  specification 
ICS3-304.  There  is  only  0.1  A  dissipated  per  chassis  at  115  VAC  50/60  Hz.  The  programmable  con¬ 
troller  has  self-contained  trouble  shooting  similar  to  buzzer  and  jumper  trouble  shooting  in  relay  sys¬ 
tems. 


At  the  Square  D  Company  it  was  found  that  they  continue  to  manufacture  and  expand  their  main 
product  line  of  controller  which  is  called  NORPAK.  Also  manufactured  are  two  varieties  of  programm¬ 
able  controller;  the  SY/MAX-20  and  the  8881.  The  NORPAK  system  comes  in  two  forms,  encapsu¬ 
lated  as  in  upper  Fig.  16  and  plug-in  as  in  lower  Fig.  16.  The  form  of  encapsulated  "NOR"  logic  used  is 
shown  in  Fig.  17. 
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Fig  I'  —  Culler  Hummer  ivpic.il  LSL  control  panel  Reprinted  *<in 
permission  from  Culler-Hammer  Products.  Eaton  Corporanon 
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The  basic  encapsulated  system  has  building  blocks  for  three  and  four  input,  six  and  twenty  pack 
NOR,  OR,  retentive  memory,  transfer  memory,  BCD  counter,  reversible  BCD  counter,  single  shot 
multivibrator,  shift  register,  time  delay  and  power.  There  are  input  and  output  packs  for  signal  conver¬ 
sion,  filtering  and  output  amplification.  The  plug-in  NORPAK  system  has  a  wider  range  of  logic  func¬ 
tions  which  are  more  than  adequate  for  elevator  control  purposes. 

Applications  of  encapsulated  NORPAK  logic  systems  are  on  American  Motors  assembly  lines  and 
are  in  Ford  press  controls.  While  the  encapsulated  and  push-in  NORPAK  systems  use  discrete  transis¬ 
tors  the  encapsulated  NORPAK  uses  germanium  transistors  while  the  push-in  NORPAK  uses  silicon 
transistors.  The  NORPAK  system  dates  from  1958  [27],  At  the  present  time  there  is  no  Navy  ship 
which  uses  this  type  of  controller. 

Packaging  of  this  system  was  designed  to  meet  the  most  stringent  industrial  requirements.  Port¬ 
able  kits  are  provided  to  aid  in  training.  The  plug-in  system  requires  about  one-half  as  much  space  as 
the  encapsulated  system.  NORPAK  power  is  +20  VDC  and  -20  VDC. 

The  SY/MAX-20  programmable  controller  was  designed  to  replace  conventional  relay  control  sys¬ 
tems  of  as  few  as  15  relays.  Applications  are  packaging  and  assembly-materials-handling  machinery, 
machine  tools,  wood  and  paper  processing  machinery,  etc.  The  controller  uses  a  Schottky  bipolar  cus¬ 
tom  microprocessor.  There  are  up  to  2000  words  of  read/write  nonvolatile  memory  and  electrically 
alterable  read  only  memory  is  provided.  One  word  is  equivalent  to  one  relay  contact  or  coil.  Relay 
rungs  can  contain  up  to  60  contacts  (10  across  by  six  down).  There  are  80  three-digit  counters  and 
timers,  and  reversible  shift  registers.  Arithmetic  functions  are  available  such  as  plus,  multiply  and 
divide.  Input  modules  cover  the  range  6  V/120  VAC  or  DC.  Output  modules  provide  120/240  VAC 
or  low  voltage  DC.  There  are  also  simulator  plug-in  modules  for  input  and  output. 

The  controller  comprises  power  supply,  processor  and  memory  module  (there  is  a  program  inter¬ 
face  module  for  monitoring).  The  controller  fits  into  a  cabinet  which  is  12.5  cm  (5  in.)  deep.  For 
checkout,  outputs  can  be  forced  to  the  "on"  or  "off"  stale.  LED  indicators  are  provided  for  status  or 
location  of  malfunction.  There  is  a  separate  portable  programmer  which  uses  standard  relay  symbols 
for  direct  entry  from  relay  ladder  diagrams.  A  CRT  can  be  used  to  visually  inspect  the  ladder  diagram 
on  the  screen.  Program  changes  can  be  made  while  the  controller  is  operating  machinery.  The  Class 
8881  programmable  controller  incorporates  a  Motorola  6800  microprocessor.  The  controller,  which 
uses  12  VDC  CMOS  technology  is  a  direct  replacement  for  relay  systems  in  very  large  applications.  Ini¬ 
tial  costs  are  often  a  fraction  of  the  amount  encountered  with  relay  or  hard-wired  solid-state  logic. 

There  are  2048  inputs  and  outputs.  A  magnetic  reed/ write  core  can  be  provided  with  up  to 
16,000  words.  Input  is  via  optically  isolated  buffers  or  reed  relays.  There  are  120  VAC  output  cards 
which  use  solid-state  triacs.  A  built-in  monitoring  system  used  LEDs.  Inputs  and  outputs  both  have 
indicator  lights. 

The  8881  has  a  programming  box  which  allows  programs  of  reiay-ladder-logic  to  be  created  and 
changed  easily.  Programs  are  functionally  equivalent  to  relay  logic  and  95  steps  can  be  programmed 
into  one  relay  ladder  diagram  rung  with  up  to  eight  parallel  branches  opened  before  the  rung  is  closed. 
The  relays  can  be  given  analog  or  digital  timing  via  functions  which  are  available. 

The  controller,  which  is  more  powerful  than  required  for  elevators,  can  be  interfaced  with  many 
peripherals  and  can  perform  simple  arithmetic  functions. 

Contacts  with  the  Digital  Equipment  Corporation  (DEC)  revealed  the  following.  The  Digital 
Equipment  Corporation  continues  to  manufacture  many  varieties  of  their  PDP-11  system.  Table  11 
shows  the  DEC  operating  system  comparison.  The  policy  of  DEC  is  one  of  roll-over  in  their  product 
line  towards  items  of  new  technology.  As  items  of  high  technology  become  available  it  is  company  pol¬ 
icy  to  develop  new  products  rather  than  make  pin-for-pin  technology  insertion  replacements  for  older 
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products.  Latest  versions  of  the  PDP-11  are  12 3  and  /24.  These  will  eventually  replace  the  PDP- 
11/03. 

One  common  thread  running  through  the  PDP-11  series  is  the  instruction  set  comprising  400 
software  instructions.  The  LSI-11  is  a  large-scale  integrated  16-bit  processor.  The  PDP-11/03  is  the 
LSI- 11  in  a  box  complete  with  a  power  supply  and  fans.  The  LSI  is  the  PDP-11  on  a  single  card.  The 
failure  rate  on  the  LSI-11  microprocessor  chip  is  20  000  unit  hours  per  failure.  Present  initial  cost  of 
the  LSI- 1 1  including  4K  of  16-bit  RAM  is  less  than  S  7 00.00.  Because  of  company  policy  the  contact  at 
DEC  said  that  five  years  technical  support  was  the  maximum  they  would  agree  to  for  their  range  of  pro¬ 
ducts,  although  they  were  prepared  to  provide  provisioning  for  up  to  ten  years. 

Norden  Division  of  United  Technologies  manufacture  militarized  versions  of  the  PDP-11  micro¬ 
computer.  The  PDP-1I/34M  is  a  military  specification  machine  used  by  the  U  S.  Army.  The  PDP- 
11/70M  is  another  militarized  minicomputer.  These  models  are  housed  in  a  box  complete  with  power 
supply.  Norden  Division  also  manufactures  the  LSI-1 1M  which  is  a  militarized  version  of  the  LSI-11 
minicomputer  on  a  single  card.  Technical  data  for  the  LSI-1 1M  is  shown  in  Table  12. 

Other  manufacturers  of  small  machine  controllers  surveyed  included  Hyde  Park  Electronics. 
Omron  Electronics,  Electromatic  Components,  Giddings  and  Lewis  Electronics,  and  Eaton  Corp.  Count 
Control  Systems  Division. 

The  machine  controller  made  by  Hyde  Park  Electronics  is  a  part  detector  used  primarily  for 
applications  on  conveyor  lines  for  bottle  filling  etc.  There  are  different  modules  for  delay,  stop  motion, 
single  pulse,  shift  register  and  power.  Signals  from  proximity  or  photoelectric  switches  or  timing  dev¬ 
ices  are  stored  or  compared  with  values  in  the  memory  circuit.  Control  circuitry  times  the  start  and 
stop  of  machine  action,  or  initiaies  alarms. 

Omron  manufactures  miniature  controller  units  incorporating  timer  and  memory  operation.  There 
are  LED  operational  and  power  indicators.  The  controller  will  accept  AC  inputs  and  provide  DC  out¬ 
puts.  Electromatic  Components  Ltd.  manufactures  modular  plug-in  controls,  counters  and  meters. 

Giddings  and  Lewis  Electronics  Company  produces  a  programmable  controller  that  can  make  com¬ 
parisons.  call  subroutines,  scan  controls,  do  arithmetic  computations,  and  provide  DC  output  drives. 
CRT  graphics  can  be  used  to  aid  programming. 

The  Count  Control  Systems  Division  of  Eaton  Corporation  manufactures  its  Durant  system  6500. 
This  programmable  controller  can  handle  up  to  16  sub-programs  at  220  programmable  levels.  There  are 
16  program  inputs,  16  program  outputs,  seven  inputs  for  reset  and  one  output  for  alarm.  The  con¬ 
troller  has  been  used  for  plastic  molding,  dye-casting  and  metal  cutting.  Several  companies  make  com¬ 
ponents  which  could  be  used  in  a  specially  designed  controller  system. 

Reed  relays  are  made  by  Gordos  Corporation.  MEKO  Instruments  Company,  C.  P.  Clare  and 
Company,  Elec-trol  Inc.,  Magnecraft  Electric  Company  and  Hamlin  Inc.  The  life  of  regular  reed 
switches  is  on  the  order  of  fifty  million  to  one  hundred  million  operations.  Mercury  film  switches  with 
over  3.4  xlO10  lifetime  operations  are  made  by  Gordos  and  Fifth  Dimension  Inc.,  but  to  use  these 
would  require  a  waiver  under  MIL-E-17807B  on  the  use  of  mercury  aboard  ships.  A  thorough  descrip¬ 
tion  of  all  standard  relay  types  and  symbols  is  given  in  MIL-STD-1346A.  As  of  this  date,  however,  no 
selected  standard  solid-state  passive  telegraph  relays  have  been  established. 

Finally,  the  discussion  under  this  heading  will  address  standard  electronic  module  (SEM)  controll¬ 
ers.  Both  static-logic  and  programmable  controllers  can  be  assembled  using  SEMs.  As  of  1974  there 
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Table  12  -  Norden  LSI-1 1 VI  Technical  Summary 


LSI-1 1M  features 

•  Versatile  POP- 1 1  instruction  set  (over  400 
instructions) 

•  Identically  with  LSI  -11  software 

•  Up  to  four  times  faster  than  the  LSI-1 1 

•  Available  with  4K  word  resident  RAM  memory 

•  Memory  expandable  in  off-the-shelf,  plug-m 
modules 

•  1 6K  and  32K  word  core  memory  modules 

•  4K  word  PROM  memory  option 

•  Bus  flexibility 

•  Firmware  multiply  and  divide 

•  Floating  point  instruction  set  option 

•  Bit,  byte,  and  word  instructions 

•  Vectored  interrupts 

•  Built-in  bootstrap  and  automatic  self  test 

•  Power  fail  and  automatic  restart 

•  Virtual  console  routine 

•  High  military  reliability 

•  Off-the-shelf,  plug-m  interfaces  for  serial  and 
parallel  I/O 

•  Resident  firmware  debugging  techniques 

•  Hardware  and  software  training  programs 

•  Unmatched  program  development  facilities 

•  Extensive  OECUS  (user  library  software) 

•  Supported  by  RT-1 1  and  RSX-1  IS 
operating  systems 

Physical  specifications 

Size:  6  in.  x  8.2  in.  xl  in. 

Power:  19  5  watts 

Weight  (approx):  2  lbs 

Performance  characteristics  (typical) 

Speed:  200KOPS 

Instruction  Timing 

Move:  1.5  usee  Multiply:  12.5  usee 

Add:  15  usee  Branch:  3.25  usee 

Resident  RAM  Memory 

Read  access  time:  500  nsec 

Input/Output 

I/O  transfer  rates  up  to  833K  words /sec 

Copyright  ®  1977  by  United  Technolopet  Corporation 


Ambient  Temperature  Ranges 
(Module  edge  temperature) 

Operating  —54°  to  — 85°C 
Non-operatmg  —62°  to  ^85°C 

Test  standards 

Temperature  —  Altilude 
MIL-E-5400,  Class  1A  or  2X 
MIL-E-16400,  Range  1 
MIL-E-4158 

Vibration  —  Hard  Mounted 

Sinusoidal  —  MIL-STD-810  method  514  2 

Procedure  i 

Figure  514.2-2  curve  J  '5  G.  5-500  Hz) 
Random  —  MIL-STD-81 0  method  514  2 
Procedure  I A 

-,gure  514  2-2A  <WC  =  04  3-  'Hz.  7  3  3  RMS' 
Shock  —  Hard  Mounted 

MIL-STD-810  Method  516.2  Procedure  i 
15  G  1 1  MS  pulse: 

Bench  Handling.  Procedure  V 
Shock  —  Modified  Mounting 
MIL-S-901 .  Class  1 A 
Soiar  Radiaiion 

MIL-STD-810.  Method  505  i  Procedure  i 
104  Watts /Ft- 
Humidity 

MIL-STD-810.  Method  507  1  Procedure  H 
Fungus 

MIL-STD-810,  Method  508  1  Procedure  i 
Sail  Fog 

MIL-STD-810.  Method  509  1  Procedure  l 
Dust  (fme  sand) 

MIL-STD-810.  Method  510  i  Procedure  I 
txoiosive  Atmosphere 

MIL-STD-810,  Method  5111.  Procedure  I 
EMI 

Comply  with  applicable  portions  of 
MIL-STD-461A,  Notice  3 
Test  per  MIL-STD-462 
TEMPEST 

Comply  with  applicable  requirement  o' 
NACSEM  5100 
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were  over  fifty  systems  in  the  Department  of  Defense  using  SEMs  for  a  total  of  three  million  modules. 
At  that  time  there  were  approximately  250  standard  module  types.  The  throw  away  modules  are  dis¬ 
tinguished  by  high  quality  control  and  reliability. 

The  general  specification  for  SEMs  is  MlL-M-28787.  A  program  manager's  guides  for  using  the 
modules  is  published  as  MIL-HDBK-246.  Requirements  for  employing  standard  electronic  modules  are 
contained  in  M1L-STD-1378. 

Design  requirements  for  use  by  manufacturers  of  new  modules  are  covered  by  M1L-STD-1389. 
This  specification  defines  such  things  as  key  codes  and  critical  or  transient  temperatures,  etc.  Other 
requirements  cover  initial  and  end-of-life  tolerance  after  30  000  h  operation,  and  that  contact  pins  shall 
be  gold  plated.  Performance  parameters  are  specified  for  equipment  needed  for  testing  of  standard 
electronic  modules  in  MIL-STD-1665. 

Standard  electronic  modules  could  be  developed  or  are  presently  on  the  drawing  board  for  solid- 
state  relays  or  analog  switches,  from  which  an  elevator  controller  could  be  built  which  duplicates  relay 
logic.  Static-logic  controllers  using  SEMs  have  already  been  built  by  Unidynamics  Inc.  for  installation 
aboard  DD963  class  ships,  and  are  being  proposed  for  the  CVA-71  new  construction. 

A  standard  electronic  module  programmable  controller  is  presently  being  developed  by  the  Naval 
Weapons  Support  Center  (NWSC),  Crane,  Indiana.  A  block  diagram  of  this  controller  is  shown  in  Fig. 
18.  NWSC  began  the  programmable  controller  program  following  the  development  of  a  memory  board 
for  the  PDP-14  controlled  elevators  when  the  DEC  withdrew  support  for  their  line  of  PDP-14  mini¬ 
computers. 

One  version  of  the  controller  [28]  was  evaluated  aboard  the  USS  KITTY  HAWK.  A  new 
microprocessor  design  which  has  been  developed  is  presently  being  evaluated  at  sea,  also  on  the  KITTY 
HAWK.  There  is  an  input  box,  a  central  processor  box  and  an  output  box.  The  input  box  converts 
signals  to  levels  compatible  with  the  central  processor.  The  central  processor  performs  logic  operations 
and  provides  outward  control  signals  using  instructions  supplied  by  the  read  only  memory  (ROM).  The 
output  box  retains  information  sent  by  the  central  processor  and  uses  this  stored  information  for 
controlling  external  equipment  or  for  further  interrogation. 

The  microprocessor  control  system  is  built  entirely  of  SEM  modules.  It  has  25  different  key  codes 
and  188  modules.  Ten  of  the  key  codes  are  new.  The  I/O  is  organized  into  blocks  capable  of  accepting 
up  to  16  inputs  or  controlling  up  to  16  outputs  or  providing  up  to  12  programmable  timers.  All  elec¬ 
tronics  is  TTL  which  uses  +5  VDC.  Other  power  supplies  are  ±12  VDC  and  -30  VDC.  Incoming 
signals  can  be  1 15  VAC,  28  VDC  or  5  VDC. 

Twisted  pair  cable  is  used  between  input  and  output  boxes  and  the  central  processor.  Incoming 
TTL  signals  from  the  conversion  circuit  go  to  a  multiplexer  which  selects  a  16  bit  word  based  on  the 
word  select  information.  The  system  clock  generates  12  clock  phases  which  effectively  divide  one 
machine  cycle  into  12  parts. 

The  controller  has  normal  computer  features  such  as  steering  logic,  operation  decoder,  instruction 
register,  program  counter,  read-only-memory,  central  processor,  CP  select,  A  and  B  registers,  compara¬ 
tor,  test  flag,  location  register,  output  register,  readout,  input  register,  computer  interface,  etc.  Solid- 
state  relays  in  the  output  boxes  switch  alternating  current  devices  such  as  motors,  solenoids,  etc.  There 
are  two  ratings  of  the  solid-state  relays;  1  A  and  10  A.  All  outputs  are  cleared  when  powering  up  to 
insure  safe  start-up.  Indicator  lamps  can  be  located  on  both  input  and  output  signals.  Neon  indicators 
can  be  installed  across  the  AC  side  of  the  SSRs  to  tell  whether  the  SSR  is  on  or  off. 
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There  is  a  iist  of  firm-wear  failure  codes.  In  the  manual  there  are  78  pages  of  firm-wear  or 
module  fault  isolation  information.  The  system  is  designed  for  fail-safe  operations  with  self-test 
designed  to  isolate  95%  of  system  faults  to  5  or  less  modules.  A  variety  of  indicator  lamps  are  provided 
for  AC  power,  5  VDC,  standby,  operate,  and  error  indication.  A  6-digit  display  is  used  to  present  fault 
information  to  the  operator. 

Following  developmental  costs,  production  costs  of  20  systems  are  estimated  to  be  1  000  000 
FY79  dollars,  i.e.,  S50  K  per  unit.  Reliability  calculations  using  MIL-HDBK-217B  predict  a  MTBF  of 
34  000  h.  Many  of  the  non-standard  modules  being  developed  for  this  program  have  great  potential  in 
becoming  standards  of  the  future  such  as  the  10  A  and  1  A  relays,  the  optically  isolated  input,  the 
peripheral  interface,  the  2  ROMs  and  the  timer. 

SENSOR  PHILOSOPHY 

This  section  of  the  report  summarizes  contacts  made  with  designers  and  manufacturers  of  sensors 
and  with  sensor  trouble-shooting  and  training  personnel  at  naval  shipyards  and  other  naval  support 
establishments.  The  discussion  centers  on  lessons  learned  from  past  experiences  with  shipboard  sen¬ 
sors  and  recommendations  for  improved  sensors  and  signal  transmission  links  of  the  future.  The  term 
sensor  in  this  section  is  used  in  the  broader  sense  to  cover  electromechanical  and  proximity  devices 
used  for  remote  sensing  of  elevator  position,  door  and  hatch  opening  status  and  for  command  devices 
such  as  push  buttons.  The  section  opens  with  a  brief  history  of  elevator  sensor  development. 

Historical  Overview 

Until  recently,  sensors  on  shipboard  elevators  have  been  of  the  electromechanical  type  using 
make  and  break  normally  open  or  normally  closed  contacts  for  sensing  both  proximity  and  command 
requirements  as  push  buttons.  Although  mechanical  limit  switches  are  still  readily  available  and 
manufactured  by  many  suppliers  in  a  wide  variety  of  configurations,  their  use  has  steadily  been  reduced 
aboard  ships.  Reasons  for  this  are  (a)  corrosion  from  salt  spray  and  aqueous  film  forming  foam 
(AFFF)  fire  extinguishing  mixture  which  affects  the  actuator  arm  bearing  and  roller,  and  (b)  humidity 
which  corrodes  the  contacts. 

The  low  reliabilitv  of  these  switches  can  be  improved  but  only  at  the  expense  of  weight  and  cost 
to  provide  a  container  sealed  against  hurmdity  or  a  rotor  mechanism  which  cannot  corrode.  Even  when 
these  problems  have  been  corrected,  the  actuator  arm  on  most  limit  switches  will  rotate  to  a  new  sens¬ 
ing  position  on  the  shaft  when  the  elevator  is  slightly  out  of  alignment.  This  is  to  prevent  physical 
damage  to  the  contactor  mechanism  from  over  travel  of  the  armature,  but  severely  restricts  the  toler¬ 
ance  in  alignment  of  electromechanical  limit  switches.  The  same  problems  were  discovered  to  have 
occurred  in  commercial  aircraft  (29]. 

Aircraft  of  the  first  jet  generation  were  equipped  with  electromechanical  actuated  position  indicat¬ 
ing  systems.  No  one  needs  to  tell  the  airline  people  anything  about  the  constant  adjustment  problems 
or  switch  failures  associated  with  that  system.  A  workshop  on  landing  gear  in  1968  pinpointed  the 
problem  inherent  in  the  electromechanical  system  as  false  landing  gear  position  and/or  landing  gear 
door  position  indication  and  inability  to  retract  the  landing  gear  due  to  gear  handle  lock  circuit  malfunc¬ 
tion. 


The  following  types  of  troubles  were  listed;  (a)  hermetically  sealed  switch  housing  seal  failures 
permitted  moisture  to  enter  the  switch  housing  causing  corrosion,  (b)  freezing  of  switch  linkage  and 
mechanism  during  winter  operation,  (c)  connector  plug  corrosion  shorting  open  circuits,  and  (d)  bro¬ 
ken  wires  in  landing  gear  harness.  These  failures  cause  malfunction  of  the  gear/door  position  indicating 
system  or  gear  handle  lock,  generally  resulting  in  an  interrupted  flight. 
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The  heart  of  new  designs  for  shipboard  conveyors  and  elevators,  and  aircraft  undercarriage  sys¬ 
tems,  is  the  proximity  switch.  The  proximity  switch  operating  without  contact  with  its  target  is  an  effort 
to  design  out  the  deficiencies  of  the  hermetically  sealed  electromechanical  limit  switch. 

Although  there  are  differences  in  principles  of  operation  and  reliability  between  proximity 
switches,  the  most  important  problem  has  been  availability.  Limit  switches,  for  the  most  part,  are 
proprietary  or  patented  devices  which  are  usually  encapsulated  and  unrepairable  at  the  ship.  There  is 
no  industry  standard  or  government  owned  design  for  any  of  these  devices,  which  makes  long  term 
availability  problematical.  Manufacturers  frequently  obsolete  sensor  models  from  their  product  line. 
When  replacements  are  found  they  frequently  are  of  different  size,  require  different  hold-down  founda¬ 
tions  and  provide  different  signal  outputs. 

Sensor  Alternatives 

The  review  of  sensor  alternatives  considered  the  following  rating  factors:  (a)  detection  technique, 
(b)  historical  availability  of  sensors,  (c)  mean  time  between  failure  or  other  reliability  information,  (d) 
whether  passive  or  active  operation,  (e)  problems  of  maintenance  or  maintainability,  (f)  provision  for 
EMI  protection,  and  (g)  major  applications  for  each  sensor.  The  suggestions  of  sensor  users  for 
improvement  were  carefully  recorded.  The  safety  requirements  for  operation  in  a  hazardous  environ¬ 
ment  are  more  easily  met  with  some  sensors  than  with  others;  these  aspects  will  be  considered  later  in 
the  report.  The  major  divisions  under  which  sensors  will  be  discussed  are  electromechanical  devices, 
proximity  switches  and  encoders. 

Electromechanical  Devices 

Enough  has  been  said  already  on  electromechanical  limit  switches  and  mechanical  push  buttons 
that  a  further  discussion  of  their  disadvantages  is  unnecessary.  The  problems  of  explosion-proofing 
mechanical  contactor  devices  will  be  treated  later. 

The  advantages  of  using  mechanical  contactor  switches  are:  (a)  many  companies  manufacture 
these  switches,  (b)  there  are  a  number  of  industry  standards,  (c)  the  switches  are  attractive  for  long¬ 
term  availability  and  low  design-obsolescence.  Underwriters  Laboratories  cover  commercial  switches  in 
[301.  Although  the  selection  of  switches  to  meet  military  shock  and  vibration  specifications  greatly 
reduces  the  range  of  those  which  can  be  considered,  the  advantages  of  using  electromechanical  switches 
are  still  significant. 

It  was  found  in  talking  to  electricians  mates  aboard  Navy  ships  that  they  had  very  few  objections 
to  the  use  of  electromechanical  switches.  When  the  writer  asked  about  corrosion  etc.,  few  illustrations 
of  such  problems  were  identified.  In  one  case  mentioned  earlier  but  repeated  here  for  effect,  when 
electromagnetic  interference  affected  proximity  switches  at  a  flight  deck  hatch,  mechanical  switches 
were  used  to  replace  them.  When  asked  why  mechanical  switches  at  such  an  exposed  position  did  not 
suffer  deterioration  from  environmental  effects  it  was  found  that  it  was  only  on  rare  occasions  that  the 
flight  deck  hatch  was  opened. 

All  manufacturers  use  mechanical  limit  switches  for  certain  elevator  design  functions.  The  use  of 
these  switches  provides  a  second  mode  of  failure  to  proximity  switches  and  have  advantages  where 
duplicate  or  end  of  travel  sensing  is  required  for  safety  purposes.  In  Navy  specification  MIL-E- 17807 
mechanical  limit  switches  are  required  for  overtravel  and  certain  other  safety  functions. 

While  most  manufacturers  of  commercial  elevators  use  a  mixture  of  proximity  and  mechanical 
switches  it  was  found  that  Westinghouse  Inc.  uses  only  mechanical  limit  switches  on  all  passenger 
elevators.  It  is  significant  that  this  company  uses  no  light  or  magnetic  controls. 
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Mechanical  push  buttons  are  still  used  by  the  majority  of  elevator  manufacturers  although  some 
use  light  switches,  magnetic  Hall  effect  switches,  and  finger  activated  electrostatic  switches.  There 
seems  to  be  no  good  reason  for  shipboard  use  of  anything  other  than  mechanical  push  buttons,  espe¬ 
cially  when  current  limiting  in  control  circuits  can  avoid  the  need  for  expensive  explosion  proofing. 

Proximity  Switches 

Proximity  switches  reviewed  fall  under  the  headings;  (a)  variable  reluctance,  (b)  eddy  current,  (c) 
light  activated,  (d)  magnetic,  (e)  electrostatic,  and  (f)  acoustic. 

(a)  Variable  Reluctance 

Reluctance  is  the  term  used  in  a  magnetic  circuit  to  describe  the  resistance  to  magnetic  flux.  If  a 
magnetic  circuit  includes  an  air  gap,  then  the  reluctance  of  that  circuit  can  be  reduced  by  partly  filling 
the  air  gap  with  a  ferromagnetic  material.  This  variation  in  the  reluctance  causes  an  increase  in 
impedance  at  the  sensing  head  which  can  be  detected  either  through  the  use  of  an  impedance  bridge  or 
through  the  detuning  of  an  oscillator  circuit.  Examples  of  variable  reluctance  sensors  are  those  made 
by  Cutler  Hammer  (Fig.  3),  ELDEC  (Upper  Fig.  4),  and  General  Electric  (Fig.  5). 

New  versions  of  variable  reluctance  sensors  are  being  made  by  Cutler  Hammer  and  by  Square  D. 
The  ELDEC  variable  reluctance  sensor  has  not  been  used  on  Navy  ships  at  this  time,  being  fitted  pri¬ 
marily  to  aircraft.  The  ELDEC  sensor  installed  on  the  USS  INDEPENDENCE  and  other  ships  is  of  the 
eddy  current  type.  The  frequency  used  in  variable  reluctance  sensors  varies  between  60  Hz  and  100 
kHz.  Some  switches  use  proprietary  circuitry  for  switching  AC  loads  without  the  need  for  a  separate 
DC  power  supply. 

Variable  reluctance  switches  can  be  made  with  ranges  to  24  mm  on  a  SO  mm  x  50  mm  steel  tar¬ 
get.  The  range  with  an  aluminum  target  is  about  58%  of  that  for  steel.  Switching  histeresis  is  about  0.4 
mm.  A  most  advanced  variable  reluctance  sensor  system  has  been  developed  by  ELDEC  for  use  on  the 
new  range  of  Boeing  commercial  jetliners  [31,32,331. 

Two-piece  proximity  switches  are  recommended  with  an  electronics  unit  and  a  remotely  located 
variable  reluctance  sensor.  The  proximity  switches  feed  into  a  microprocessor  used  to  monitor  flaps, 
detect  faults,  verify  that  flaps  move  in  the  direction  commanded,  prevent  deployment  of  flaps  at  unsafe 
speed,  and  monitor  landing  gear  functions  in  the  aircraft.  The  electronics  unit  contains  proximity  elec¬ 
tronics  cards,  logic  cards,  output  driver  cards  and  test  module.  The  switches  have  a  19  mm  range. 
Mean  time  between  failure  is  in  excess  of  200  000  h  compared  to  1  500  h  for  high-quality  mechanical 
switches.  Due  to  extremely  high  reliability  there  is  virtually  no  maintenance  scheduled  or  unscheduled 
during  the  60  000  flight  hours  life  of  the  aircraft.  The  switch  conforms  to  commercial  specifications  for 
humidity,  sand,  dust,  salt  spray,  fungus,  altitude,  shock  and  vibration. 

(b)  Eddy  Current 

The  eddy  current  sensor  works  upon  the  principle  that  energy  is  robbed  from  an  electromagnetic 
circuit  due  to  currents  set-up  within  the  target  material.  These  sensors  are  most  effective  when  con¬ 
ducting  target  materials  are  used  such  as  copper  and  aluminum. 

Frequencies  in  eddy  current  devices  are  usually  about  1  kHz.  The  loss  of  energy  from  the  eddy 
currents  can  be  used  to  reduce  the  level  or  kill  the  oscillator.  Alternatively  the  mutual  inductance 
between  the  transmitter  and  target  can  be  used  to  change  the  natural  frequency  of  the  oscillator.  Both 
AC  and  DC  versions  of  eddy  current  sensors  are  available  with  AC  or  DC  input  power  and  switching. 
The  ELDEC  eddy  current  sensors  installed  on  CVA  59  class  ships  were  preferred  unanimously  by  per¬ 
sonnel  from  the  Norfolk  Naval  Shipyard  Design  Division  and  the  Atlantic  NAVSEA  Support  Center. 
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Initially  ELDEC  sensors  were  susceptible  to  electromagnetic  interference,  but  following  a  design 
change  the  switches  now  perform  satisfactorily.  Tests  were  run  from  30  MHz  to  150  MHz  at  200  V/m 
electric  field.  Sensors  are  not  now  susceptible  to  the  range  of  EM  interference  when  targets  are  located 
both  near  and  far.  The  switch  is  manufactured  both  as  a  DC  model,  which  has  a  valued  built-in  test 
circuit,  and  as  an  entirely  115  VAC  model  with  5  A  inductive  load  output  relay  capacity.  Electromag¬ 
netic  interference  testing  on  the  AC  switch  is  reported  in  [34],  Electromagnetic  interference  testing 
was  to  MIL-STD-461A  Notice  3  Test  Method  RS03. 

(c)  Light  Activated 

Light  activated  sensors  have  been  used  quite  extensively  in  the  past  on  both  Navy  and  commer¬ 
cial  elevator  systems  and  conveyors.  Light  sensors  used  with  a  GE  Directomatic  II  Controller  on  the 
USS  AMERICA  were  replaced  with  Denison  eddy  current  proximity  switches  after  the  light  sensor 
manufacturer  rendered  the  switch  obsolete. 

Many  of  the  passenger  elevators  on  Navy  ships  presently  use  light  sensors.  These  elevators  do 
not  usually  go  to  the  open  deck  where  switches  may  be  affected  by  the  sun.  Also,  in  passenger  eleva¬ 
tors,  salt  spray  generally  can  not  enter  the  elevator  trunk  to  coat  the  light  windows  and  attenuate  the 
beam. 

Some  food  conveyors  on  Navy  ships  use  light  sensors  in  safety  circuits  to  detect  that  packages 
have  been  removed  before  inverting  and  returning  conveyor  pallets  at  the  end  of  travel.  Light  sensors 
of  various  kinds  have  been  used  extensively  by  the  Otis  Elevator  Company  and  other  major  manufac¬ 
turers  of  passenger  elevators. 

Light  activated  sensors  are  made  using  incandescent  lamps  and  lenses,  neon  lamps  and  light  emit¬ 
ting  diodes.  The  most  common  light  sensors  manufactured  today  use  infrared  sources  which  can  over¬ 
come  to  some  extent  the  problems  of  a  dirty  environment.  These  sensors  were  the  ones  preferred  by 
Naval  Ship  Systems  Engineering  Station  (NAVSSES),  Philadelphia. 

Advantages  of  light  sensors  are  that  they  can  be  used  to  detect  planes  to  a  close  tolerance  at 
ranges  more  than  adequate  for  elevator  purposes. 

Disadvantages  of  light  sensors  are  (a)  they  are  fast  acting,  (b)  they  can  be  affected  by  ambient 
light,  (c>  the  passage  of  light  is  easily  attenuated  by  grime,  salt  spray  or  accidental  paint  spraying  opera¬ 
tions,  (d)  the  window  which  admits  light  also  admits  electromagnetic  interference  and  photo-transistors 
are  readily  saturated  by  intense  high-frequency  radiation  (See  Fig.  19). 

Five  guests  in  a  hotel  elevator  recently  suffocated  when  smoke  from  a  fire  obscured  the  photocell 
light  beams.  The  elevator  could  not  move  since  the  controller  read  this  condition  as  a  sensor  malfunc¬ 
tion.  A  fire  and  smoke  hazard  is  certainly  also  present  in  combatant  ships. 

Light  sensors  used  in  open  deck  locations  are  generally  fitted  with  a  rubber  boot  to  exclude  sun¬ 
light.  In  one  case,  painting  surrounding  the  sensor  which  initially  was  white  was  changed  to  black.  For 
elevators  with  a  high  usage  rate  the  rubber  boot  tends  to  wear  or  tear  requiring  additional  special 
maintenance  of  this  system. 

Where  light  sensors  are  used  in  open  sunlight,  for  instance  by  the  logging  industry,  the  light  is 
generally  pulsed  instead  of  continuous  with  pulse  frequencies  of  between  1  and  2  kHz.  Filtering  for 
this  frequency  provides  the  signal  which  will  not  be  present  if  the  light  source  is  blocked  or  if  sunlight 
saturates  the  receiver.  Cutler  Hammer  has  an  infrared  sensor  under  development  using  this  technique. 
Tne  infrared  frequency  is  950  nm  and  a  bicycle  reflector  can  be  used  at  ranges  from  6  m  to  15  m.  The 
light  source  is  of  8  ms  pulses  at  1  to  2  kHz  repetition  rate.  Since  the  sunlight  represents  a  DC  level 
over  the  AC  signal  there  is  a  filter  to  drain  the  sunlight  effect. 
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LED/DETECTOR  SPECTRAL  MATCHING  CHARACTERISTICS 


WAVELENGTH  (m m) 


Fig.  19  —  Radiation  response  of  LED  emitters  versus  detectors.  Reprinted  with  permission  from  Electronic 
Design,  Vol.  27,  No.  19;  copyright  5  1979  from  Hayden  Publishing  Co.,  Inc. 


(d)  Magnetic 


Recent  years  have  shown  a  large  increase  in  the  number  of  magnetic  sensors  used  for  elevator 
and  conveyor  control.  There  are  Navy  applications  on  aircraft  carriers  and  auxiliaries.  Commercial 
manufacturers  such  as  US  Elevator  and  Otis  use  them  extensively.  In  the  writer's  opinion  magnetic 
sensors  were  the  preferred  type  of  all  those  studied. 


The  most  common  magnetic  sensor  uses  a  mechanical  rocker  arm  and  permanent  magnets.  The 
contactor  mechanism  is  enclosed  within  a  housing  and  filled  with  hydrogen  to  prolong  contact  life  by 
excluding  humidity  from  the  mechanism  and  bearing  and  by  limiting  compounds  produced  by  arcing  of 
the  contacts.  One  form  of  this  switch  is  made  by  the  General  Equipment  and  Manufacturing  Company 
under  the  proprietary  name  "GO"  switch.  These  "GO”  switches  have  1250  W  resistive  contact  ratings  at 
120  to  480  VAC.  Sensing  distances  are  over  20  mm. 

An  improvement  to  this  switch  would  be  the  addition  of  a  separate  test  circuit  for  automatic 
remote  testing  purposes.  The  switch  as  presently  configured  is  a  throwaway  unit.  On-site  maintenance 
would  be  improved  if  the  mechanical  contactors  were  replaced  so  that  ihe  switching  effect  was  achieved 
by  a  variable  capacitor  or  lightbeam  interruption.  This  new  circuit  could  still  be  enclosed  within  a 
copper  housing  to  exclude  dirt,  humidity  and  salt  spray,  and  protect  the  device  from  electromagnetic 
interference  and  paint  spraying  operations. 

Other  kinds  of  magnetic  devices  which  would  use  DC  magnetism  are  sensors  based  on  the  flux- 
meter  and  flux-gate  magnetic  saturation  effect.  Switches  of  this  type  were  not  found  in  the  literature  or 
in  any  installation,  but  deserve  further  study  (351. 

Miniaturized  flux-gate  magnetometers  can  be  made  using  toroidal  cores  with  semicircularly  wound 
second-harmonic  detector  windings  acting  as  a  field  sensitive  element.  Toroids  wrapped  using  2-mil 
nickel-iron  composition  tape  can  readily  be  saturated  at  low  excitation  power. 

One  other  magnetic  technique,  which  has  been  developed  by  Microswitch  into  limit  and  push¬ 
button  switches,  makes  use  of  the  Hall  effect.  Hall-effect  integrated  circuits  which  could  be  used  in  a 
Navy  designed  limit  switch  are  manufactured  by  Texas  Instruments. 
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The  Hall  effect  is  described  as  follows.  When  a  current  is  flowing  in  a  material  at  right  angles  to  a 
magnetic  field,  then  a  voltage  is  developed  at  right  angles  to  both  the  current  and  the  magnetic  field. 
All  conducting  materials  possess  the  Hall  effect  characteristic  to  some  extent  but  some  alloys  have  been 
especially  developed  to  accentuate  it.  The  Hall  effect  is  generally  very  small.  A  practical  detector 
requires  large  magnetic  fields  and  some  preamplification.  One  advantage  is  that  the  same  sensor  could 
be  used  for  both  proximity  and  push-button  switches.  No  example  was  found  on  any  Navy  or  commer¬ 
cial  elevator  or  conveyor  system  of  the  use  of  Hall-effect  switches,  although  there  is  no  good  reason 
why  they  should  not  be  used  under  certain  circumstances. 

(e)  Electrostatic 

Electrostatic  sensors  make  use  of  capacitance  changes  between  a  sensor  plate  and  the  presence  or 
absence  of  a  target  plate  or  the  operator’s  body.  Electrostatic  push  buttons  are  used  in  commercial 
passenger  elevators  but  most  other  electrostatic  sensors  are  made  with  other  applications  in  mind.  In 
one  case  a  sensor  area  60  cm  x  60  cm  in  the  vicinity  of  rotating  machinery  was  provided  as  a  safety 
barrier  to  protect  personnel  from  injury.  The  machinery  was  designed  to  turn  off  automatically  when 
any  part  of  the  observer’s  body  passed  through  the  safety  screen. 

The  equation  for  plate  capacitance  in  air  is  C  =  0.2235  KA  in  -  Did.  C  is  the  capacitance  in 
microfarads  between  n  number  of  plates  of  area  A  square  inches  spaced  d  inches  apart  in  a  medium 
with  dielectric  constant  K  (K  ~  1  for  air).  Using  this  formula  a  capacitance  change  of  1  p.  f  would 
result  when  a  5  cm  x  5  cm  target  plate  is  placed  20  mm  from  a  5  cm  x  5  cm  sensor  plate. 

(f)  Acoustic 

No  acoustic  proximity  switches  were  found  to  be  generally  available  for  elevator  control  applica¬ 
tions  although  the  use  of  acoustics  was  considered  to  be  a  good  idea  by  naval  personnel  associated  with 
the  problem.  Inexpensive  acoustic  ranging  sensors  are  made  today  and  are  included  in  automatic  cam¬ 
eras  made  by  Polaroid  Inc.  In  a  similar  manner  as  for  light,  it  would  be  possible  to  pulse  or  condition 
acoustic  sensors  to  discriminate  against  background  noise  and  other  interference.  The  sensitivity  of 
piezoelectric  transducers  in  air  or  condenser  microphones  would  be  more  than  adequate  for  the  applica¬ 
tion  intended. 

(g)  Radioisotopic 

Sensors  using  low-level  radioisotopes  were  suggested  on  more  than  one  occasion  but  no  systems 
reviewed  or  commercial  manufacturers  were  found  to  use  this  technique. 

Encoders 

One  sensor  which  has  been  used  in  the  past  to  replace  several  sensors  in  the  trunk  is  the  digital 
encoder.  As  the  elevator  platform  moves  within  the  trunk  the  encoder  records  its  position  by  rotation 
caused  through  the  movement  of  an  encoder  cable  or  the  main  drive  shaft. 

Older  systems  developed  by  Westinghouse  Inc.  made  use  of  a  spot  light  counter  which  counts  the 
teeth  which  go  by  in  a  toothed  wheel.  Elevator  position  accuracy  to  12  mm  can  be  achieved  in  this 
way.  The  encoder  used  on  CVA  59  class  ships  uses  a  printed  circuit  card  but  functions  essentially  the 
same. 

Because  of  the  elongation  of  elevator  cables  under  load,  encoder  sensors  driven  from  the  main 
drive  generally  can  not  be  used  for  fine  accuracy  platform  levelling.  They  can,  however,  replace  sen¬ 
sors  used  exclusively  for  effecting  elevator  speed  changes  and  for  providing  approximate  stopping  infor¬ 
mation.  Encoders  in  Phoenix  elevator  systems  have  been  the  source  of  problems  recently.  This  ts 
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likely  to  be  caused  by  brush  wear  on  the  rotating  printed  circuit  card.  A  change  of  encoder  type  to  one 
activated  by  light  would  improve  reliability  and  greatly  simplify  trouble  shooting.  Encoder  sensors  were 
used  in  only  a  small  minority  of  the  elevator  systems  reviewed.  They  reduce  the  overall  number  of 
proximity  switches  needed  in  the  elevator  trunk  but  complicate  maintenance  by  adding  components  to 
the  logistics  base  peculiar  to  the  encoder  subsystem. 

Signal  Transmission 

Signal  transmission  will  be  discussed  under  headings  of  voltages  and  cable  properties. 

Voltages 

Practically  any  voltage  between  5  VDC  and  440  VAC  can  be  found  on  elevator  systems  both  com¬ 
mercial  and  in  Navy  use.  New  sensors  being  developed  by  the  Square  D  Company  used  12  VDC,  while 
Westinghouse  Inc.  prefers  27  VDC  or  125  VDC.  New  sensors  in  development  at  Cutler  Hammer 
operate  on  6/7.5  VDC  or  115  VAC.  The  115  VAC  sensors  rectify  and  clip  the  AC  input  power  at  30 
V,  to  charge  capacitors  which  power  the  electronics  through  one  cycle.  In  this  way,  the  switch  operates 
entirely  on  AC  power  without  the  necessity  for  a  separate  DC  power  supply  for  the  electronics. 

The  general  consensus  among  naval  personnel  was  that  signal  levels  less  than  27  V  should  be 
used  but  preferably  not  so  low  as  5  V.  For  sensor  voltages  less  than  115  V  it  is  necessary  to  invoke 
MIL-STD-1399  "Interface  Standard  for  Shipboard  Systems,"  for  electromagnetic  interference  levels  to 
assume  on  shipboard  cables. 

Cable  Properties 

Cables  in  the  better  designed  naval  and  commercial  elevator  systems  reviewed  used  shielded 
twisted  pair  telephone  type  cable  for  sensor  and  command  signals.  For  example,  the  cable  recom¬ 
mended  for  use  with  ELDEC  eddy  current  sensors  is  a  ten  conductor  shielded  cable  MHOF-10  per 
MIL-C-915.  The  Square  "D"  company  uses  2  pair  twisted  shielded  I/O  cable  per  Belden  8723. 

Sensors  that  use  preamplifiers  practically  all  use  twisted  pair  cable  from  the  sensor  to  the 
preamplifier.  Sometimes  single  wire  unshielded  transmission  line  is  used  from  the  preamplifier  to  the 
controller. 

Most  electromechanical  relay  controllers  and  the  Puget  Sound  hybrid  electromechanical  relay  con¬ 
troller  use  single  wire  or  looped  systems  for  sensors  and  push  buttons,  where  each  sensor  or  push 
button  might  have  one  wire  with  one  single  common  return  serving  all.  The  single  conductor  sensor 
system  is  most  prone  to  electro-magnetic  interference.  The  worst  system  is  one  which  uses  single  con¬ 
ductors  to  the  sensors  and  grounds  each  sensor  at  the  sensor.  Multiple  ground  loops  of  this  type 
should  be  avoided. 

Transients  and  voltage  spikes  on  the  supply  line  can  be  as  high  as  700  V  amplitude  for  2  ms  and 
2500  V  as  a  positive  peak  amplitude  short  duration  spike  according  to  MIL-E-16400G.  High  voltage 
inductive  spikes  on  elevator  signal  leads  have  been  measured  aboard  ship  and  are  considered  to  be  the 
cause  of  particular  controller  malfunctions  where  signals  are  interfaced  directly  to  the  controller  without 
isolation.  There  is  no  evidence  that  transients  on  signal  lines  present  a  problem  when  shielded  twisted 
pair  cables  are  used  and  controller  input  isolation  is  provided  by  relay  coils,  input  transformers,  or 
opto-couplers. 

To  facilitate  maintenance  it  is  also  preferable  that  all  sensor  and  command  information  be  brought 
separately  to  the  controller  and  not  looped  as  is  conventional  for  the  door  interlock  permissive.  By  pro¬ 
viding  every  test  point  at  the  controller,  the  Electricians  Mate  can  identify  most  electrical  problems 
from  a  single  location. 
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A  recent  alternative  to  electrical  cable  transmission  systems  is  to  use  fiber  optical  links  [36],  A 
summary  of  optical-fiber  characteristics  is  listed  in  Table  13  extracted  from  Electronic  Design  of 
November  8,  1979.  While  the  light  attenuation  of  glass  fiber  is  extremely  low,  the  cost  at  the  present 
time  is  prohibitively  high  at  one  dollar  per  meter.  New  developments  by  Hewlett  Packard  and  others 
(Table  14)  point  to  a  less  expensive  plastic  fiber  which  can  be  used  for  high  data  rate  transmission  over 
short  distances. 

For  2-way  circuits  paired  cable  is  10  times  cheaper  per  kilometer  than  fv  ..  optic  cable  (37). 
Present  transmission  facilities  cost  0.015  dollars  per  meter  for  number  26  AWG  urban  loop  telephone 
systems.  As  the  data  rate  increases,  however,  fiber-optic  cable  is  much  more  attractive  such  that  at 
1000  circuits,  paired  cable  cannot  be  used  and  fiber  optic  cable  is  10  times  cheaper  than  coaxial  cable. 

The  clear  advantage  of  using  fiber-optic  cable  is  in  being  able  to  reduce  the  number  of 
sensor/command  cables  involved  by  digital  multiplexing  of  information  on  a  single  cable.  This  has 
been  done  by  US  Elevator  in  connection  with  high  rise  multi-elevator  systems. 

One  interesting  possibility  is  that  if  fiber-optic  cable  is  used  for  the  transmission  link  together  with 
light  sensors,  then  light  could  be  used  all  the  way  from  the  controller  and  back  to  the  controller  thereby 
avoiding  electromagnetic  interference.  Unfortunately  the  run  can  probably  not  be  made  all  in  one 
length  and  there  would  be  the  need  for  fiber-optic  cable  unions  and  junction  boxes.  In  the  past  the 
connecting  of  fiber-optic  cables  was  an  intricate  exercise  but  recently  simple-to-use  commercial  fiber¬ 
optic  connectors  have  been  made  available  by  Hewlett  Packard.  Amphenol,  Cannon  and  others  [381. 


POTENTIAL  SHIPBOARD  SENSORS 

In  this  section,  commercial  sensor  characteristics  will  be  presented  in  more  detail  with  comments. 
A  list  of  manufacturing  companies  consulted  in  connection  with  elevator  sensors  is  given  in  Appendix 
l. 


In  looking  at  commercial  sensors,  evidence  was  collected  which  would  fit  rating  criteria  used  else¬ 
where  in  this  report.  Once  again  attention  was  paid  to  trouble-shooting  aids  for  fault  isolation  and 
detection.  In  the  case  of  sensors  it  was  found  that  only  in  very  rare  instances  was  it  possible  to  open 
the  sensor  and  effect  a  repair  on  board  ship.  Sensors  in  general  are  designed  as  throw-away  units  but 
this,  in  the  main,  was  found  by  Navy  support  personnel  to  be  not  the  most  undersirable  feature  of  sen¬ 
sors.  The  worst  problem  of  commercial  sensors  is  that  the  companies  will  frequently  stop  manufacture 
on  a  particular  model  in  order  to  concentrate  their  industrial  effort  and  sales  on  a  new  product  line. 

A  summary  of  characteristics  found  in  commercial  sensors  is  given  in  Table  15.  Encoders  were 
omitted  from  the  Table  on  the  grounds  that  they  are  peculiar  to  a  small  segment  of  the  elevator  popula¬ 
tion  and  would  most  likely  be  avoided  in  an  easily  maintainable  standard  system.  The  Table  includes 
no  manufacturers  of  radio-isotopic  sensors  since  none  were  found. 

The  conclusion  of  the  sensor  review  was  that  the  preferred  sensor  should  be  of  the  magnetic  type 
preferably  using  some  form  of  DC  or  permanent  magnetic  detection.  Sensors  based  on  the  flux-gate 
principle  look  attractive  as  an  alternative  to  the  "GCF  switch  mechanism.  No  commercial  sensors  were 
found,  however,  which  use  the  flux-gate,  Faraday  effect  of  phase  shift  m  light,  or  other  magnetometer 
principle.  Magnetic  sensors  would  be  one  area  in  which  it  would  be  possible  to  develop  a  Navy  stan¬ 
dard  for  use  in  all  elevator  applications. 
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Table  13  —  Optical-Fiber  Characteristics 
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Table  14  —  Manufacturers  of  Fiber-Optic  Transmission  Links 


Manufacturer 

Product 

Amp,  Inc. 

Belden 

Clairex  Corporation 
Hewlett  Packard 

Connectors  for  Fiber-optic  systems 

Fiber-optic  cable 

Photo-transistors  and  Darlington  photo  transistors 
Fiber-optic  100  meter  digital  transmitter  HFBR-1001 
Fiber-optic  digital  receiver  HFBR-2001 

Fiber-optic  connector/cable  assemblies  HFBR- 

Hitachi  America  Ltd. 

Laser  diodes  HLP  Series 

Motorola  Semiconductor 
Products 

High-power  infra-red  emitting  diodes  MFOE  series 
Photo-transistors,  photo-Darlingtons,  and  photo  diodes 
MFOD  Series 

Spectronics  Division 
of  Honeywell 

Fiber-optic  transmitter  module  SPX  4140 

Fiber-optic  receiver  module  SPX  4141 
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Table  15  —  Summary  of  Commercial  Sensor  Characteristics 
Manufacturer_ Sensor  Characteristics 

Mechanical 

Allen-Bradley  Standard  mechanical  limit  switches 

Cutler  Hammer  Models  include  pin  plunger,  standard  lever,  roller 

lever,  spring  lever  and  rod  lever 

The  E50  Series  is  for  up  to  600  V  rating 
Mounting  dimensions  are  standard  with  other  brands 
Low  cost  (about  S80) 

Continuous  AC  current  10  A 
Temperature  range  —  17/94°C 
Denison  Standard  mechanical  switches 

Microswitch  Model  CX: 

Rain-tight  explosion-proof  switch 
Up  to  20  A  rating 
NEMA  type  1;  general  purpose 
Type  3;  dust-tight,  rain-tight  and  sleet  resistant 
Type  4;  water-tight  and  dust-tight 
Type  5C  and  5D;  hazardous  locations  Class  I 
Types  9E,  9F  and  9G;  hazardous  locations  Class  11 
Type  13;  oil-tight  and  dust-tight  indoors 
Model  EN/J: 

Epoxy  potted,  inert-gas  filled,  stainless  steel 
enclosure  switch  with  Teflon  ice  scraper  and  "O" 
ring  seal 

15  A  resistive  load  at  28  VDC 

MIL-S-8805  Specification  calling  for  temperature 
range  — 54°/+850C  and  reliability  of  25,000  cycles 
electrical  and  100,000  cycles  mechanical 

Model  EX: 

20  A  rating 

NEMA  type  1;  general  purpose 
Types  7C  and  7D;  hazardous  locations  Class  I 
Types  9E,  9F  and  9G;  hazardous  locations  Class  11 
Model  HE/J: 

Hermetically  sealed  switch  with  bellows 
Model  LSX: 

Weatherproof,  explosion-proof  switch 

Side  rotary,  top  rotary,  top  plunger,  top  roller, 
side  plunger,  side  roller  and  wobble  stick 

_ 10  A  continuous  rating _ 

Table  continues 
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Table  15  —  Summary  of  Commercial  Sensor  Characteristics  (Continued) 


Manufacturer 

Sensor  Characteristics 

Meets  NEMA  standards  for  hazardous  locations  type  7, 

Class  I,  Groups  B,  C  and  D 

Also  type  9  Class  II,  Groups  E,  F  and  G 

Water,  dust  and  oil-tight  conforming  to  NEMA  types 

1,  3,  4  and  13 

Omron 

Model  D2  RV: 

Reed  switches  for  0.25  A  at  50  VDC  and  0.1  A 
at  100  VDC 

Some  Reed  switch  models  are  for  10  A  rating 
models  with  solid-state  output  are  for  2  A 

Some  models  have  pilot  lights  for  test 

MTBF  for  Reed  switches;  10  x  106  operations 

Square  "D" 

All  standard  mechanical  limit  switches  similar  to 

Cutler  Hammer 

Variable  Reluctance 

Square  "D" 

Class  9007  type  PS- 1 ; 

Range;  8  mm/steel.  4  mm/aluminum,  8  mm/aluminum  foil, 

3  mm/copper,  with  25  mm  x  25  mm  16  gauge  target 

15  mA  input  at  +20  VDC 

Provides  output  at  -10  VDC  into  standard  NOR  gate 

250  operations  per  second 

Sensitivity  adjustment 

Class  9007  types  V-9.  V-10,  VQ-1.  VQ-S1: 

Range  varies  with  model  to  19  mm  using  25  mm  x  25  mm 

16  gauge  steel  target 

Input  power;  120  VAC  at  25-400  Hz.  8  VA 

Output  drives  2  logic  loads  at  -16  VDC 

ELDEC 

The  ELDEC  variable  reluctance  system  is  a  two-piece 
sensor  and  amplifier  controller  which  can  be  adapted 
to  microprocessor  logic  control  of  many  switches 

MTBF  on  the  average  printed  circuit  card  in  the  j 

proximity  card  box  was  calculated  at  50  750  operational  1 

hours 

Reliability  of  the  average  proximity  logic  box 
printed  circuit  card  is  194  000  h  MTBF 

Uses  1 100  Hz  oscillator 

Microswitch 

Models  FMF: 

Sensitivity  to  40  mm  at  -40785°C 

Needs  separate  preamplifier  controller 

Table  continues 
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Table  15  —  Summary  of  Commercial  Sensor  Characteristics  (Continued) 


Manufacturer 


Sensor  Characteristics 


Eddy  Current 
Cutler  Hammer 


Denison 


ELDEC 


Series  50  proximity  sensors  operate  using  an  oscillator 
and  sensing  coil  with  detector  and  output  switch. 

Target  causes  voltage  drop  in  the  oscillator. 

Sensing  range;  5-15  mm  on  metallic  targets 

Used  for  motion  detection,  positioning,  metal  gauging, 
position  limiting 

Temperature  range  -20o/  +  80°C 
LED  indicators  for  power-on  and  switch  closed 
0.5/1  A  load  continuous  at  40/120  VAC  50/60  Hz 
NEMA  1500  V  showering  arc  specifications 
DC  sensors  operate  on  12/24  VDC 

These  proximity  switches  distributed  by  Denison  are 
manufactured  in  Germany. 

Frequency  changes  in  a  transistor  oscillator  are  detected. 

Range:  36  mm 

Being  used  for  replacement  aboard  USS  AMERICA 
Low  cost  (about  S80  in  quantity) 

Model  8-078-01: 

This  switch  has  been  used  on  US  Navy  ships  USS  KITTY 
HAWK,  RANGER,  INDEPENDENCE,  SARATOGA,  CAMDEN 


and  SACRAMENTO. 


There  have  been  three  failures  in  650  units  in  seven 
years  in  shipboard  use. 

There  was  an  electromagnetic  interference  susceptibility 
problem  on  AOE  bow  ramp  and  underway  replenishment 
systems,  but  a  new  design  exceeding  200  V/m  was 
developed  (old  design  was  20  V/m). 

Range  is  22  mm  on  38  mm  x  76  mm  x  6  mm  steel  target 
Input  load  is  30/130  mA  at  20/30VDC 

The  switch  is  normally  activated  and  provides  an  open 
emitter  output  into  a  100  mA  load. 

The  switch  has  a  built-in-test  (BIT)  circuit. 

MTBF  is  greater  than  100  000  h 

The  housing  is  304  stainless  steel  and  is  solidly 
encapsulated. 

Power  transients  are  per  MIL-STD-704A. 

Temperature  range  is  -30°/  +  65°  C 

The  vibration  specification  is  MIL-E-5272C  Procedure  XII 

Shock;  MIL-S-901C  for  grade  A  Class  1  equipment. 


Table  continues 
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Table  15  —  Summary  of  Commercial  Sensor  Characteristics  (Continued) 


Table  continues 
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Table  15  —  Summary  of  Commercial  Sensor  Characteristics  (Continued) 


Manufacturer 


Electronic  Counters  and 
Controls  Inc. 


Gordon  Products  Inc. 


Microswitch 


_ Sensor  Characteristics _ 

Switch  state  indicator  light 
Built-in  transient  and  RFI  suppression 
Low  Cost  (S90) 

Model  55191,  55525  series: 

Sensing  range;  16  mm  on  any  conductive  metal  target 
For  5,  12  and  24  VDC 
Separate  sensor  and  controller 
Model  55125  series: 

Plug-in  proximity  sensors 
Range  to  25  mm 
115/230  VAC  or  24  VDC 
Separate  sensor  and  controller 
Temperature  range;  -40780°C 
Model  PU-785A: 

6  mm  slot  with  copper  vanes  provided 

Output  NPN  sink  or  source  for  5/24  VDC  at  40  mA 

Potted  in  epoxy  for  -18°/60°C  operation 
Model  PU-7928A: 

Sensing  range;  5  mm  with  25  mm  x  25  mm  square  steel 
target 

Input;  8/28  VDC  at  5  mA 

Output;  sink  20  mA  or  source  10  mA 

Potted  in  epoxy  for  temperature  range  -25770°C 

Applications  are  limit  switch,  level  detection  and  footage  counting. 

Model  PE600: 

Range;  15  mm  with  25  mm  x  25  mm  iron  target 
Supply;  12/24  VDC  at  1.2  W 

Output;  50  mA  within  2  V  of  supply  voltage 
swing 

LED  operation  light 

There  is  also  a  115  VAC  model  with  5  A  rated  relays 
Model  FM: 

Sensitivity  up  to  38  mm 
Needs  separate  amplifier  control 
Model  100  FW: 

Range;  3  mm  shielded,  6  mm  unshielded  on  16  mm 
diameter  x  2  mm  steel  target 


Table  continues 
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_ Table  15  —  Summary  of  Commercial  Sensor  Characteristics  (Continued) 

Manufacturer_ Sensor  Characteristics 

Supply;  18/32  VDC 

Output;  32  VDC  max  deactivated,  1  VDC  max  actuated 

Environment  sealed 

Power  transients  to  MIL-STD-704 

EMI  per  MIL-STD-461A 

Model  FY: 

DC  switches  to  16  mm  sensitivity,  AC  switches  to 
32  mm  sensitivity 

Input;  120  VAC  at  50/60  Hz  or  8/20  VDC 
Output  current;  1.2  A  AC,  170  mA  DC 
LED  output  indicator 

Omron  Model  E2M-F: 

20  mm  wide  slot  for  vane  actuator 
Operating  frequency  820  kHz 
Model  E2M-G; 

5  mm  wide  slot  for  vane  actuator 
Model  E2M-LP30: 

Range;  30  mm  ±10%  using  iron  target 

Supply;  24  VDC  at  35  mA 

Output;  24  VDC  at  200  mA  from  open  collector 

Frequency  of  operation  38  ±  4  kHz 

LED  operational  indicator 

Molded  aluminum  case,  nitrile  rubber  seal,  poly¬ 
carbonate  operational  window,  phenol  resin 
detecting  surface 

A  phase  discriminator  circuit  compares  the  phase 
of  the  excitation  voltage  with  that  of  eddy  currents 
generated  on  the  surface  of  metallic  target  objects. 

The  eddy  currents  are  sensed  through  a  detector  coil 
and  inductance  bridge. 

Model  E2M-M: 

Range;  20  mm  using  iron  targets 
Operation  frequency;  225  kHz 
Model  E2M-N; 

Range;  10  mm  ±  10%  for  iron  with  repeatability 
accuracy  of  0.02  mm 

DC  supply;  12/24  VDC  at  100  mA 

_ AC  supply;  100/200  VAC  at  50/60  Hz  and  0.5/1  VA _ 

Table  continues 
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Table  15  —  Summary  of  Commercial  Sensor  Characteristics  (Continued) 


Manufacturer 

Sensor  Characteristics 

Square  "D" 

DC  output;  12/24  VDC  at  200  mA 

AC  output;  1  A  resistive,  0.5  A  inductive 

Frequency  of  operation  465  kHz  using  a  grounded  collector 

Hartley  oscillator 

Sensor  detects  difference  in  circuit  current  between 
oscillating  and  non-oscillating  state 

LED  operational  indicator 

Temperature  range;  -25°/70°C 

Relative  humidity;  35/95% 

Shock;  50  g 

Vibration;  10/55  Hz  for  two  hours  or  2.5  mm  peak  to 
peak 

Model  TL-L: 

Range;  50  mm  with  ferrous  target  100  mm  x  100  mm  x  1  mm 

DC  and  AC  types;  10/30  VDC,  90/250  VAC.  200  mA 
load  for  both  cases. 

LED  operational  indicator 

Temperature  range;  -25°/70°C 

Shock;  100  g 

Vibration;  10/55  Hz  at  1.5  mm  peak  to  peak 

Relative  humidity;  35/95% 

Many  different  models  are  made  with  applications  to 
part  feeders,  food  process  machinery,  conveyors, 
printing  machinery,  cut-to-length  lines,  part  count¬ 
ing  etc.  The  switches  have  all  solid-state  components 
and  are  encapsulated  in  epoxy. 

Model  BQ-1: 

Input;  115  VAC  or  DC 

DC  and  AC  models  have  sealed  reed  relays  for  1.8  A 
output.  AC  model  has  solid-state  amplifiers  switched 
by  reed  relay  for  2  A. 

Model  PS  101: 

Range;  15  mm  on  steel  target 

Input;  110/120  VAC  at  50/60  Hz 

Output  is  by  solid-state  NO  or  NC  relay  with  80  mA 
minimum  and  0.5  A  maximum.  Maximum  inrush 
current  10  A. 

LED  Operational  Indicator 

Temperature  range;  -10°/70°C 

Table  continues 
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Table  15  —  Summary  of  Commercial  Sensor  Characteristics  (Continued) 


Manufacturer 

Sensor  Characteristics 

■  . . .  1  ■  ■ 

Optical 

Banner 

2  wire  photo-electric  control  with  modulated  LED  and 
epoxy  potted  circuitry 

Clairex  Electronics 

Model  CLI  series: 

Wide  range  of  vane  activated  switches  using  LED  emitter 
and  photo-transistor  or  photo-Darlington  outputs 

Emitter;  Ga  As  diode  with  4  V  reverse  and  60  mA 
current 

Detector;  collector  current  100  mA  pulsed  cycle, 
current  gains  0.1 -3.0,  VCEO  30-55  V,  VECO  5  V 

Denison 

Optical  sensors  up  to  40  mm  range 

Also  600  VAC  relay  output  with  0.5  A  break  rating 

Most  models  NO  or  NC 

Electronic  Counters  and 
Controls,  Inc. 

Model  PU-372,  PU-303,  PUS-C: 

Range;  100  mm  retroflective  with  6  mm  x  6  mm  reflective 
tape.  Up  to  2  m  with  75  mm  diameter  target. 

Diffuse  range  up  to  150  mm 

Input;  12/15  VDC  except  direct  models  which  are  AC  or  DC 

Output;  NPN  transistors  sinking  250  mA  maximum 

Emitter;  modulated  LED  on  retroflective  models,  modulated 
infra-red  LED  on  diffuse  models,  number  12  plug-in  type 
tungsten  lamp  on  direct  models 

LED  operational  indicator  for  object  not  detected  in 
retroflective  and  diffuse  models 

Electronics  Corporation 
of  America 

Models  42SP1,  42SP2,  42SR2: 

Pulsed  LED  sensors  for  proximity  and  long-range  switching 

Field  of  view;  5°-20° 

Miniature  size:  11  mm  W  x  10  mm  H  x  20  mm  D 

NEMA  3,  4,  12  and  13  water-tight  and  oil-tight  enclosure 

Commercial  vibration  and  shock  resistant 

LED  alignment  and  operational  indicator 

Ferranti 

Model  ZNP100  series: 

Photo-switch  with  detector  and  output  stage  for  level 
sensing 

Microswitch 

Model  MLS4A  series: 

2500  mm  range  with  separate  sensor  and  receiver 

Infra-red  emitter  0,9  nm  wavelength  pulsed 

Table  continues 
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_ _ Table  15  —  Summary  of  Commercial  Sensor  Characteristics  (Continued) 

_ Manufacturer _ Sensor  Characteristics _ 

Supply;  12  VDC 

Emitter  and  receiver  are  completely  potted 
Model  MLS7A  series; 

Scan  distance  3  m  retroflective 
Supply;  12/24  VDC 
Red  LED  alignment  indicator 
Light-operated  or  dark-operated  NO  or  NC  output 
Omron  Model  E3S-L: 

Range  up  to  500  mm  for  aluminum  plate  targets  50  mm  x 
75  mm  in  the  reflective  mode 

Input;  12  VDC  at  50  mA  maximum 
Load  current;  80  mA 

Interference  limits;  3k  lux  from  incandescent  lamps. 

10k  lux  from  sunlight 

Shock;  50  g,  s 

Vibration;  10/55  Hz  at  1.5  mm  peak-to-peak  for  2  h 
Temperature  range;  -25°/55°C 
Relative  humidity;  45/85% 

Water  resistant  NEMA  enclosures 
Models  E3B,  E3S,  E3N; 

These  photo-sensors  feature  ranges  which  extend  to 
30  m. 

Some  models  use  diffuse  light  and  some  retroflective 
while  others  use  separate  emitters  and  detectors. 

Opcon  Inc.  Sun-proof  optical  limit  switches  using  pulsed  LED 

Ranges  to  45  m 
Scan-A-Matic  Corporation  Model  S322-3: 

Detects  large  targets  at  75  mm 

Lamp  or  Led  emitter.  Light  is  conducted  coaxially 
to  the  target  through  glass  optical  fibers  in  a 
threaded  barrel.  Light  reflects  from  the  target  to 
the  photo-transistor  located  at  the  tip  of  the 
barrel . 

Input;  5  VDC  or  VAC.  LED  takes  100  mA.  lamp 
takes  1 15  mA  current 

LED  delivers  0.94  microns  light 
AC  lamp  life  is  40  000  h 

Spectronics  Miniature  optical  vane  detectors,  reflective  switch 

_ components  and  optical  emitter  and  detector  chips _ 

Table  continues 
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Table  15  —  Summary  of  Commercial  Sensor  Characteristics  (Continued) 


Manufacturer 


Sensor  Characteristics 


Veeder-Root 


Xercon  Inc. 


Optical  Switch  Component 
Manufacturers 


Magnetic 

Microswitch 


AC  and  DC  models  with  ranges  to  150  m  direct 
and  6  m  reflective 


Model  7191: 

Range;  up  to  2  m  retroflective  on  75  mm  diameter 
target.  Minimum  scanning  distance,  25  mm  retroflective. 

Input;  12/26  VDC  at  450  mW 

Output;  current  sinking  logic  or  current  sourcing/ sinking 
analog  output 

NEMA  enclosure  codes  to  cover  water-tight,  dust-tight 
and  oil-resistive 

Ambient  light  interference;  no  effect  when  fluorescent 
or  incandescent  light  is  on  optical  axis.  Sensor 
will  operate  to  within  5°  angle  of  the  sun. 

Filtered  for  noise  spikes 

Manufactures  a  wide  variety  of  optical  switches  with 
ranges  to  many  meters.  Also  pulsed  infra¬ 
red  retro  and  proximity  switches  are  made. 

Model  DO-15,  LO-15: 

Switches  for  long  ranges  indoors  using  incandescent 
lamps 

Output;  two  3  A  triac  loads  at  1 10/220  VAC 
Model  D-12: 

Range;  7500  mm 
Supply;  12  VDC 
Output;  250  milliamps 
Model  R: 

Range;  3300  mm  retroflective,  75  mm  off  a  glossy  box 
Supply;  120/240  VAC 
Output;  5  A  DPDT  relay 

A  large  number  of  companies  manufacture  optical  switch 
components  including  International  Rectifier,  Spectronics 
and  Vactec.  Switch  components  include  LED  sources, 
photo-diodes,  photo-transistors,  photo-Darlingtons. 
opto  Schmidt  detectors,  silicon  light  sensors  and  light 
dependent  resistors. 


Model  1AV: 

2.5  mm  gap  vane  operated  Hall-effect 


Table  continues 
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Table  15  —  Summary  of  Commercial  Sensor  Characteristics  (Continued) 


Manufacturer 

Sensor  Characteristics 

Omron 

Supply;  6-16  VDC 

Output;  20  mA 

Temperature  range;  -407100°C 

Model  200  FW: 

Hall-effect  sensor  operates  on  350  gauss  (G),  releases  on 

30  gauss.  Practical  for  ranges  to  20  mm  with  strong 
permanent  magnet. 

Supply;  18/32  VDC 

Environmentally  sealed 

Transients  per  MIL-STD-704 

EMI  to  MIL-STD-461 A 

Model  FR: 

Two  piece  sensor  with  separate  magnet,  or  one  piece 
sensor  using  ferromagnetic  target 

Range  to  20  mm 

Output  up  to  2  A  at  400  VDC  or  280  VAC 

Model  SN: 

Hall-effect,  bounce-free,  push-button  switch 

Uses  barium  ferrite  PVC  magnet 

Input;  5  VDC 

To  MIL-S-8805  and  MIL-S-3950 

Model  SR: 

Hall-effect  sensor  requiring  400  G  to  operate. 

Practical  range  to  20  mm 

Input;  5  VDC  or  6/16  VDC 

Output;  digital  source  or  sink 

Temperature  range;  -407150°C 

Model  SS  series: 

Hall-effect  chips  requiring  400  G  to  operate 

Input;  4/5  VDC  or  6/16  VDC 

Output;  will  sink  up  to  20  mA 

New  Microswitch  Hall-effect  sensors  use  silicon  technology 
in  preference  to  indium  antimonide 

Model  D2EV: 

Hall-effect  sensor  with  pin  plunger 

Input;  12/24  VDC 

Table  continues 


83 


G  O.  THOMAS 


Table  15  —  Summary  of  Commercial  Sensor  Characteristics  (Continued) 


Manufacturer 

Sensor  Characteristics 

Sentrol 

Reed  switch  models: 

Range;  3-100  mm 

Switching  voltage;  130-200  VDC  at  0.3-0.5  A 

Internal  dry  nitrogen  atmosphere  with  rhodium  plated 
contacts  to  eliminate  cold  welding  and  sticking 

Reliability;  107  cycles  to  failure 

Shock;  50  g,s  at  11  ms 

Vibration;  35  g,s  at  50/200  Hz 

Temperature  range;  -557!25°C 

Sprague 

Model  UGS-301 19 

Hall-effect  digital  switch  similar  to  TI  intergrated  circuit 

Requires  420  G  to  operate 

Supply;  20  VDC  at  12  mA 

Output;  20  mA  sink 

Temperature  range;  -40°/  +  150°C 

Model  UGS-302  OT: 

Hall-effect  sensor  requiring  220  G  to  operate 

Supply;  25  VDC  at  6  mA 

Texas  Instruments 

Both  Texas  Instr  uments  and  Microswitch  manufacture 

Hall-effect  devices  that  can  be  incorporated  into 
integrated  sensor  systems. 

They  ail  require  between  400  and  600  G  to  operate 

Supply  voltages  vary  from  4  to  16  VDC 

Output  is  sometimes  open  collector 

Electrostatic 

Gordon  Products  Inc. 

Model  PC127: 

Sensor  plus  control  unit 

Range;  200  mm  on  all  materials 

Model  PC  131: 

Range;  40  mm 

Model  PC251: 

Range;  300  mm 

Omron 

Model  E2K: 

Range;  3-25  mm 

Table  continues 
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Table  15  —  Summary  of  Commercial  Sensor  Characteristics  (Concluded) 


Manufacturer 

Sensor  Characteristics 

Proxigard 

Input;  10/40  VDC  or  90/250  VAC 

Output;  200  mA  DC  or  NO/NC  solid-state  switch 

Sensor  frequency;  70  Hz  for  DC  input,  10  Hz  for  AC  input 

Applications  are  for  use  on  glass,  lumber,  plastics, 
containers  and  objects  in  walls 

Shock;  50  g,s 

Vibration;  10/55  Hz  at  1.5  mm  peak-to-peak 

Relative  humidity;  35/95% 

Temperature  range;  -25°/70°C 

Model  PCI  10-12: 

Acoustic 

Asco 

Machine  safety  switch  to  OSHA  standards 

Model  02C025: 

500  mm  x  1000  mm  plane  detector 

Model  PC300: 

Capacitance  touch-switch 

Models  6090/6080: 

Hyde  Park  Electronics  Inc. 

Range;  50  mm  -200  mm  reflective  or  1000  mm  directly 
opposite 

Operating  frequencies;  50  kHz  sound 

Fluid  amplifier  using  input  air  at  1  m  of  water 
pressure 

Output;  air  at  200  mm  of  water  pressure  for  "ON,”  8  mm  of 
water  pressure  for  "OFF 

Applications  are  for  light-transparent  materials. 

Explosion-proof  switch 

Microsonic  switch: 

Can  detect  objects  13  mm  wide  at  the  rate  of  2000/min. 

Uses  high  frequency  sound 

Output;  15  VDC 

Applications  are  for  use  on  light-transparent  objects. 

Explosion-proof  and  intrinsically  safe 
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PRESENT  AND  FUTURE  REQUIREMENTS  FOR  SHIPBOARD  ELEVATOR  ELECTRICAL 
CIRCUITS  IN  HAZARDOUS  ENVIRONMENTS 

Discussion  of  this  topic  will  be  conducted  in  the  order  of  present  requirements,  future  require¬ 
ments  and  equipment  for  use  in  hazardous  environments. 

Present  Requirements 

General  specifications  for  ships  of  the  US  Navy  (39]  presently  require  explosion-proof  Group  D  or 
explosion-proof  fan-cooled  Group  D  enclosures  in  (a)  gasoline  hazard  areas,  (b)  paint  mixing  and  issu¬ 
ing  rooms,  (c)  flammable  liquid  storage  rooms,  and  (d)  gas  cylinder  storage  rooms  (flammable). 
Enclosed  spaces  adjoining  and  opening  into  the  aforementioned  spaces  shall  have  explosion-proof 
enclosures  unless  the  doors  opening  into  the  spaces  have  certain  classifications.  In  oil-cargo  ships,  com¬ 
partments  with  access  less  than  2.4  m  (8  ft)  above  nonenclosed  cargo  handling  decks  shall  have 
explosion-proof  enclosures  unless  the  space  is  provided  with  specified  ventilation. 

References  to  gasoline  mean  aviation  or  automotive  gasoline.  Gasoline  hazard  areas  include 
tanks,  tank  compartments,  tank  cofferdams,  packaged  stowage  compartments,  pump  rooms,  motor 
rooms,  filter  rooms,  access  trunks,  piping  trunks,  jettisonable  stowages,  paint  or  flammable  liquid 
storage  rooms,  and  areas  within  an  open  horizontal  distance  of  4.5  m  (15  ft)  and  below  1.2  m  (4  ft) 
above  the  deck  of  the  weather  access  to  gasoline  cargo  tanks,  pump  rooms,  replenishment  stations, 
paint  storage  rooms,  etc.,  if  these  rooms  have  access  to  the  weather. 

Elevator  trunks  and  pits  and  spaces  that  are  open  to  hangars  or  other  areas  in  which  gasoline 
fueled  aircraft  are  stowed  or  fueled  are  also  gasoline  hazard  areas  as  are  areas  within  1.2  m  (4  ft)  of  the 
deck  of  hangars  and  well-decks  on  landing  ships  and  docking  ships  in  which  gasoline  fueled  aircraft  or 
vehicles  are  stowed  or  fueled,  and  within  1.2  m  (4  ft)  of  highest  water-line  in  docking  wells  of  docking 
ships. 


Other  gasoline  hazard  areas  are  compartments  that  are  next  to  gasoline  tank  compartments,  pack¬ 
age  stowage  compartments,  cofferdams,  etc.,  and  compartments  having  direct  access  to  gasoline  hazard 
areas  including  compartments  containing  ventilation  duct  work  serving  gasoline  hazard  areas.  Installa¬ 
tions  for  JP5  fuel  to  MIL-T-5624  do  not  require  explosion-proof  equipment. 

Requirements  in  hypergolic  missile  spaces  are  specially  defined  in  [40],  Hypergolic  or  liquid  pro¬ 
pellents  are  pre-packaged  combinations  of  fuel  and  an  oxodizer,  generally  nitric  acid,  which  ignite  spon¬ 
taneously  and  continue  to  burn  when  allowed  to  come  in  contact  with  each  other.  The  Bullpup  missile 
and  the  drone-target  use  engines  which  utilize  liquid  propellents. 

Certain  bomb  clusters  use  the  fuel-air  explosive  ethylene  oxide  which  will  produce  an  explosive 
atmosphere  when  released.  The  liquid  fuel  hazards  are  fire,  explosion,  toxicity  and  corrosion.  The 
ethylene  oxide  (EO)  weapon  will  produce  hazardous  fire  or  explosive  environment  and  a  mildly  toxic 
atmosphere. 

Magazines  and  adjacent  handling  and  assembly  areas  are  considered  to  be  Class  I  Division  2  hazar¬ 
dous  locations  as  defined  in  the  National  Electrical  Code.  Electrical  equipment  installed  in  these  spaces 
which  are  spark  producing  are  required  to  be  provided  with  explosion-proof  or  hermetically  sealed 
enclosures  complying  with  MIL-STD-108. 

Future  Requirements 


Discussions  were  held  with  NAVSEA  personnel  directly  responsible  for  general  specification 
changes  in  shipboard  elevator  electrical  circuits  in  hazardous  environments.  The  decision  has  been 


made  to  phase  out  all  avgas  requirements  from  aircraft  carriers  and  some  other  fleet  ships.  When  there 
is  no  avgas  on  a  ship  the  hazardous  areas  for  elevator  electronics  will  cease  to  include  elevator  trunks 
and  hangar  and  flight  decks.  Elevator  electronic  explosion-proofing  requirements  will  then  exist  only  in 
hypergolic  and  fuel-air-explosive  weapons  magazines  for  the  vast  majority  of  fleet  ships. 

Elevator  Electronic  Equipment  in  Hazardous  Environments 

It  will  be  noticed  that  only  one  method  for  dealing  with  electronic  equipment  in  hazardous 
environments  is  mentioned  in  present  ship  specifications.  The  solution  required  is  for  explosion¬ 
proofing  of  the  equipment.  Actually  there  are  two  methods  acceptable  today  for  achieving  the  same 
objective.  The  second  method  is  by  use  of  intrinsic  safety  techniques  [41]. 

In  explosion-proofing  equipment  the  technique  is  to  construct  around  the  equipment  (such  as  a 
switch  or  push  button)  a  strong  and  heavy  enclosure  with  controlled  ventilation  to  the  outside.  When 
an  explosive  atmosphere  is  present  both  inside  and  outside  of  the  heavy  enclosure  and  a  spark  ignites 
the  inflammable  mixture  within  the  enclosure,  the  strength  and  mass  of  the  enclosure  ensures  that  the 
exploded  gas  will  be  released  in  a  controlled  manner;  and  also  that  as  the  gas  is  released  its  temperature 
is  reduced  to  the  point  where  the  inflammable  mixture  outside  of  the  enclosure  will  not  ignite. 

Many  manufacturers  make  explosion-proof  equipment.  Cutler  Hammer  makes  an  explosion-proof 
limit  switch  Model  CBX  for  example.  This  switch  meets  hazardous  location  requirements  of  the 
National  Electrical  Code  under  Class  I  Groups  B,  C,  D  and  Class  II  Groups  E,  F,  G.  Cutler  Hammer, 
in  addition  to  this,  makes  a  full  line  of  explosion-proof  switches,  as  do  other  manufacturers  such  as 
Square  "D."  The  principle  disadvantage  of  explosion-proof  equipment  is  in  the  weight,  space  and  cost  of 
providing  the  explosion-proof  barrier.  The  technique  of  intrinsic  safety  achieves  the  same  objective  in  a 
more  sophisticated  manner  and  at  far  less  cost  or  weight  and  volume  increase. 

Intrinsic  safety  is  a  relatively  new  idea,  dating  back  only  20  years,  in  which  current  in  circuits  is 
limited  depending  on  the  resistive  or  reactive  nature  of  the  load  to  levels  which  can  be  shown  to  be 
incapable  of  causing  an  explosion  in  particular  hazardous  mixtures.  Use  of  the  technique  began  initially 
in  mine  workings  but  has  been  used  aboard  ships  for  transmitting  messages  in  ship-to-ship  communica¬ 
tions  along  replenishment-at-sea  fuel  lines.  The  technique  is  now  widely  accepted  by  the  navies  of  all 
Western  countries  and  by  the  US  Coast  Guard,  however,  the  choice  between  explosion-proofing  and 
providing  intrinsic  safety  has  not  yet  been  written  into  Navy  specifications.  There  is  also  no  Navy  or 
military  standard  for  use  in  specifying  such  equipment. 

It  is  recommended  that  where  it  is  necessary  to  place  elevator  electronic  equipment  in  hazardous 
locations,  then  those  circuits  should  be  considered  for  protection  using  intrinsic  safety  barriers  as  an 
alternative  to  explosion-proofing.  It  is  also  recommended  that  a  military  standard  be  written  on  the 
subject  of  intrinsically  safe  electrical  circuits  for  Navy  shipboard  use.  Since  this  subject  is  relatively 
new,  a  more  detailed  discussion  is  presented  in  the  next  section. 

INTRINSICALLY  SAFE  ELECTRICAL  CIRCUITS 

During  visits  to  Systems  Commands  and  commercial  manufacturers  it  was  found  there  was  strong 
recommendation  for  the  consideration  of  intrinsically  safe  circuits  in  preference  to  explosion-proofing 
equipment  in  hazardous  environments.  In  particular.  Cutler  Hammer  recommended  that  instead  of 
using,  explosion-proof  switches  the  Navy  should  consider  intrinsic  saiety  i.e.,  the  selection  of 
voltage/current  combinations  with  barriers  intended  to  avoid  sparking  or  explosion.  The  section  will  be 
discussed  under  the  headings  Regulations  and  Intrinsically  Safe  Equipment. 
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Regulations 

The  only  US  Government  regulation  found  relating  to  intrinsic  safety  was  in  the  Code  of  Federal 
Regulations  (CFR)  relating  to  the  US  Coast  Guard  and  Title  46-Shipping. 

Intrinsically  safe  instruments  and  equipment  or  wiring  may  be  installed  in  any  hazardous  area  for 
which  it  has  been  approved  by  the  Commandant  US  Coast  Guard.  It  may  be  used  in  lieu  of  explosion- 
proof  equipment. 

Where  it  is  specified  that  equipment  shall  be  approved  for  Class  I  or  Class  II  locations,  approval 
by  an  independent  test  laboratory  is  required.  This  approval  shall  be  based  on  the  tests  outlined  in  the 
Underwriters  Laboratory  Inc.,  "Standards  for  Industrial  Control  Equipment  for  Use  in  Hazardous  Loca¬ 
tions.  Subject  698." 

Intrinsically  safe  systems  may  be  installed  in  any  hazardous  area  as  permitted  by  other  Coast 
Guard  regulation.  The  recommended  practice  for  intrinsically  safe  and  non-incendive  electrical  instru¬ 
ments  (RP  12.2)  published  by  the  Instrument  Society  of  America  is  recognized  as  a  guide  for  approval 
of  intrinsically  safe  equipment  by  the  Commandant.  British  Government  standards  on  this  same  sub¬ 
ject  are  contained  in  [42]. 

Another  US  regulatory  body  for  intrinsically  safe  circuits  is  the  Mining  Enforcement  and  Safety 
Administration  (MESA)  under  the  Department  of  Interior.  This  agency  is  responsible  for  mines  and 
mining  operations  with  specific  reference  to  coal  dust  and  methane  gas  atmospheres.  The  National  Fire 
Protection  Association  has  addressed  the  subject  under  the  heading  Intrinsically  Safe  Process  Control 
Equipment  [43]. 

Commercial  standards  on  intrinsic  safety  are  covered  by  Underwriters  Laboratory  in  the  standard 
UL913  and  by  Factory  Mutual  Engineering  Corporation  in  their  publication  "Intrinsically  Safe  Electric 
Circuits  for  Application  in  Hazardous  Locations."  Factory  Mutual  hazardous  locations  are  taken  from 
Article  500  of  the  National  Electrical  Code  as  follows: 

Class  I  Atmospheres  which  contain  concentrations  of  flammable  gases  or  vapors 

Class  II  Atmospheres  which  contain  ignitable  amounts  of  dust 

Class  III  Atmospheres  which  contain  combustable  amounts  of  fibers  or  filings 

Divisions  of  these  classes  refer  to  the  probability  that  a  hazardous  atmosphere  will  be  present: 

Division  1  refers  to  locations  where  particular  hazardous  materials  are  present  in  the  air  in  potentially 
flammable  concentrations  continuously,  frequently  or  intermittently,  under  normal  operating  conditions 
(NEC  Code  5004A).  Division  2  locations  are  those  which  might  become  hazardous  in  the  event  of  a 
mechanical  breakdown,  accidental  failure  or  the  abnormal  operation  of  equipment  (NEC  Code  5004B). 

Groups  indicate  the  type  of  hazardous  environment:  Groups  A  to  D  are  flammable  gases  or 
vapors.  Groups  E,  F  and  G  apply  to  combustable  or  conductive  dusts.  Equipment  approved  by  Factory 
Mutual  is  approved  as  intrinsically  safe  based  upon  Class.  Division  and  Group. 

Factory  Mutual  also  uses  two  additional  definitions: 
intrinsically  safe  refers  to  equipment  incapable  of  releasing  sufficient  electrical  or  thermal 
energy  under  normal  or  abnormal  operating  conditions  to  cause  ignition  of  a  specific  hazardous 
mixture; 

nonincendive  refers  to  equipment  which  assures  that  sufficient  electrical  or  thermal  energy  will 
not  be  released  under  normal  operating  conditions  to  cause  ignition  of  the  specific  hazardous 
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mixture.  An  intrinsically  safe  barrier  must  be  able  to  withstand  two  separate  faults.  At  24  VDC 
and  10  mH  inductance,  0.5  A  can  be  tolerated  as  intrinsically  safe. 

The  Instrument  Society  of  America  has  published  several  recommended  practices  on  intrinsic 
safety.  Instruments  in  hazardous  locations  including  intrinsic  safety,  explosion-proofing,  purging,  seal¬ 
ing,  etc.,  are  topics  discussed  in  [44], 

Another  instrument  society  recommended  practice  for  intrinsically  safe  and  nonincendive  electri- 
cal  instruments  is  [45],  This  practice  covers  Class  I  Division  1  and  Division  2  hazardous  areas  as 
defined  in  the  National  Electrical  Code.  When  intrinsically  safe  equipment  is  used,  requirements  for 
explosion-proofing  do  not  apply. 

The  following  definitions  are  made  by  the  Instrument  Society  of  America: 

Intrinsically  safe  equipment  and  wiring  is  equipment  and  wiring  which  is  incapable  of  releasing 
sufficient  electrical  or  thermal  energy  under  normal  or  abnormal  conditions  to  cause  ignition  of 
a  specific  hazardous  atmospheric  mixture  in  its  most  easily  ignited  concentration.  Non¬ 
incendive  equipment  is  equipment  which,  in  its  normal  operating  condition,  would  not  ignite  a 
specific  hazardous  atmosphere  in  its  most  easily  ignited  concentration.  Circuits  may  include 
sliding  or  make-and-break  contacts  releasing  insufficient  energy  to  cause  ignition.  Circuits  not 
containing  sliding  or  make-and-break  contacts  may  operate  on  energy  levels  potentially  capable 
of  causing  ignition. 

Abnormal  conditions  defined  .  bove  will  cover  accidental  damage  to  any  part  of  the  equipment  or 
wiring,  insulation  or  other  failure  of  electrical  components,  application  of  over-voltage,  adjustment  and 
maintenance  operations,  and  other  similar  conditions.  Abnormal  conditions  also  include  any  two  faults 
in  combination;  however,  if  one  of  the  faults  is  highly  improbable,  the  circuit  is  intrinsically  safe  if  nei¬ 
ther  fault  alone  can  raise  voltage  or  current  above  the  levels  specified  in  Fig.  20.  The  data  shown  in 
Fig.  20,  extracted  from  the  Code  of  Federal  Regulations,  Title  46,  Shipping,  was  developed  from  vari¬ 
ous  experimental  results  for  minimum  ignition  energy  of  mixtures  at  normal  room  temperature  and 
pressure.  Most  of  the  experiments  used  capacitors  and  pointed  electrodes. 

The  information  in  Fig.  20  includes  factors  of  safety  on  currents  and  voltages  determined  from  a 
relationship  of  inductive  and  capacitive  circuit  energy  storage  components  and  the  hazardous  material 
group  involved.  The  Instrument  Society  has  published  similar  information  [45]  and  also  a  recom¬ 
mended  practice  on  installation  of  intrinsically  safe  instrument  svsiems  in  Class  I  hazardous  locations 
[46], 


Intrinsically  Safe  Equipment 

A  directory  of  equipment  approved  for  intrinsically  safe  installations  is  published  by  Information 
Concepts  Inc.  (ICON)  of  Philadelphia.  Unidynamics  Inc.  makes  entire  elevator  systems  which  are  int¬ 
rinsically  safe  and  non-sparking  for  use  in  tanker  pump  rooms  and  in  other  areas  where  hazardous 
atmospheric  mixtures  may  exist.  Elevators  were  installed  aboard  the  CONDEEP  oil  drilling  platform. 
The  hazardous  area  elevators  incorporate  solid-state  infra-red  switching  and  sensing,  low 
voltage/. current  operation,  effective  circuit  isolation,  special  construction  at  all  rubbing  and  impact 
areas,  solid-state  controls,  over-voltage  protection,  and  remote  location  of  high  voltage  components  to 
US  Coast  Guard  regulations  111 .80-5 (a)  to  subchapter  J,  1971. 

Isolation  of  low-voltage  circuitry  in  hazardous  areas  was  achieved  through  DC  to  DC  converters 
via  optically  coupled  transistors  for  isolation.  Over-voltage  protection  was  by  "crow  bar."  The  crow  bar 
is  an  SCR  device  which  short  circuits  the  power  supply  when  an  over-voltage  condition  triggers  the 
SCR. 


89 


G  O.  THOMAS 


SAIN1M  -  J3NVi3rwNI 


90 


CUR  RENT.  AMPERES  CUPP.EMT  AMPERES 

(a)  Inductance  vs  current,  pentane  group  (b)  Inductance  vs  current  ethylene  group 
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(c)  Inductance  vs  current,  hydrogen  group  (d)  Capacitance  vs  voltage,  pentane  group 

Pig.  20  (Continued)  —  Intrinsic  safely  design  data 
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Transformer  protection  is  provided  by  an  electrostatic  shield  which  shunts  the  voltage  to  ground 
should  the  transformer  break  down.  All  wire  ropes  are  made  of  bronze.  All  impacting  points  are 
bronze  to  steel  construction  to  guard  against  sparking. 

The  Taylor  Instrument  Company  Process  Control  Division  manufactures  intrinsic  safety  barriers 
to  limit  energy  available  in  a  hazardous  held  area  to  levels  below  that  required  to  cause  an  explosion. 
The  barrier  consists  of  resistance  to  limit  current  and  Zener  diodes  to  limit  open  circuit  voltage.  A  fuse 
in  series  with  the  signal  is  also  provided.  Positive  and  negative  barrier  circuit  diagrams  are  shown  in 
Fig.  21.  Components  are  selected  so  that  the  fuse  will  fail  before  the  Zener  diodes  fail  open. 

Redundancy  in  the  form  of  two  Zener  diodes  and  multiple  grounding  provides  maximum  fail-safe 
security.  With  reference  to  Fig.  21,  the  diodes  are  selected  so  D1  always  has  a  slightly  higher  Zener 
voltage  than  D2.  If  a  fault  occurs  in  the  safe  area  that  applies  excess  voltage  between  terminals  1  and 
2,  diode  D2  conducts.  !f  the  excessive  voltage  is  high  enough  and  of  long  enough  duration,  diode  DI 
will  conduct  and  the  fuse  will  blow.  Resistor  R1  limits  the  fuse  current.  The  combination  of  diode  D2 
and  resistor  R2  regulates  the  maximum  voltage,  and  resistor  R3  limits  the  maximum  output  current  at 
terminals  3  and  4. 

Barriers  are  installed  in  the  signal  leads  between  the  safe  area  and  the  hazardous  area.  The  selec¬ 
tion  of  the  proper  barrier  depends  upon  which  lead  is  grounded.  If  the  positive  signal  lead  is  grounded 
a  negative  barrier  is  used.  If  neither  signal  lead  is  grounded  two  barriers  are  used,  one  in  each  signal 
lead.  Barriers  must  be  physically  located  in  a  non-hazardous  area.  Each  barrier  must  have  redundant 
connections  to  system  grounding  electrodes.  Only  one  signal  circuit  per  barrier  is  permitted.  Standard 
commercial  twisted  pair  signal  wire  may  be  used  to  make  connections  between  the  barrier  and  the 
hazardous  equipment. 

Specifications  on  one  of  the  DC  barriers  supplied  by  Taylor  Instrument  Company  are  as  follows: 
Input  voltage;  20  VDC 
Fault  voltage;  250  RMS 
Output  normal  current;  4-20  mA 
Maximum  ignition  current;  170  mA 
Impedance,  inut  to  output  in  series;  236  O 
Impedance,  output  effective  fault  current  limiting;  206  12 
Operating  temperature;  4-4°/-f60oC 

Other  manufacturers  making  intrinsically  safe  equipment  are  Delaval,  Electro  Corporation,  Gen¬ 
eral  Equipment  and  Manufacturing  Company,  Honeywell,  Microswitch  and  Square  "D."  The  "GO” 
switch  is  rated  Class  I  Division  2;  Class  II  Groups  E,  F,  G;  and  Class  III.  A  r  'ic  level  detector  is 

made  by  Microswitch  which  uses  the  change  in  refraction  of  a  prism  immerse :  .  i  as  the  detecting 

principle.  This  sensor  is  rated  intrinsically  safe  for  Class  I,  Division  1,  Groups  A.  ,  C  and  D  in  the 
National  Electrical  Code. 

Square  "D"  manufactures  a  10  A  single-pole  double-throw  relay  for  120-550  VAC  with  intrinsi¬ 
cally  safe  features.  This  relay  must  be  mounted  in  a  nonhazardous  area.  Only  the  control  leads  go  into 
the  area  to  "start”  or  "stop"  push  buttons.  Solid-state  energy-limiting  components  are  encapsulated  in 
epoxy  resin.  Low  AC  is  rectified  to  12  VDC  and  Zener  diode  protection  added.  The  relay  is  rated  by 
Underwriters  Laboratory  for  Class  I  Groups  A,  B,  C  and  D  or  Class  II  Groups  E,  F  and  G. 

DISCUSSION  AND  RECOMMENDATIONS 

A  state-of-the-art  review  and  problem  analysis  has  been  conducted  into  elevator  controller  and 
sensor  subsystems.  The  results  may  be  used  to  improve  on  or  develop  standard  control  systems  for  use 
in  Navy  shipboard  freight  and  weapons  elevators.  The  conclusions  of  the  study  are  as  follows: 


93 


G.O.  THOMAS 


HI  R2  R3 


HI  R2  R3 


Fig.  21  —  Taylor  Instrument  Company  intrinsic  safety  barrier  circuits 


Elevator  Logic  Controllers 

Technology  levels  of  controllers  examined  during  the  review  included: 

a.  Electromechanical  relays  using  both  commercial  relays  and  those  designed  to  military 
specifications  including  SEM. 

b.  Relay-logic  using  solid-state  relays  for  both  the  controller  and  as  operational  drivers. 

c.  So-called  static-logic  of  various  types  including  standard  TTL  and  CMOS  “and/or"  or 
"nand/nof'  logic. 

d.  Standard  TTL  logic  using  existing  Standard  Electronic  Modules. 

e.  Programmable  microprocessors  using  commercially  available  large-scale  integrated  com¬ 
ponents  or  the  prototype  Navy  Development  of  a  Standard  Electronic  Module  programm¬ 
able  microprocessor  controller. 
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The  recommendation  is  made  that  relay-logic  is  the  preferred  technology  to  use.  This  is  based  on 
the  simplicity  of  understanding  relay-logic  for  shipboard  maintenance  personnel.  Other  technology  lev¬ 
els  will  require  additional  training  for  either  all  of  the  maintenance  personnel  or  some  specific  section 
designated  to  service  the  equipment.  Both  of  these  alternatives  are  considered  undesirable  at  this  time 
since  additional  training  of  personnel  to  perform  a  function  for  a  very  small  part  of  their  productive 
time  would  result  in  the  speciality  being  lost  due  to  insufficient  practice.  The  other  alternative,  which  is 
to  train  a  small  number  of  people  specifically  at  a  new  technology  level,  was  seen  to  be  a  very  question¬ 
able  practice  as  it  affected  Electronics  Mates  on  those  ships  requiring  this  procedure.  Personnel  changes 
resulting  from  reassignment  or  release  from  the  services  quite  frequently  depleted  the  one  or  two  peo¬ 
ple  responsible  for  this  very  important  system  aboard  particular  aircraft  carriers  visited.  The  preferred 
route  to  take  would  be  to  direct  maintenance  and  repair  work  at  all  Electronics  Mates  2  and  3  class 
aboard  the  vessel  and  structure  the  work  so  that  it  can  be  performed  by  those  at  the  lowest  common 
denominator  of  training,  education  or  motivation. 

Relay-logic  systems  were  found  clearly  superior  in  maintainability,  long-term  parts  supportability, 
component  standardization,  human  interface,  existing  population,  and  complexity. 

Message  062207Z  Nov  80  originating  with  Naval  Sea  Support  Center  Pacific  Detachment 
(NAVSEACENPAC  DET)  San  Diego,  CA  commends  the  prototype  Puget  Sound  Naval  Shipyard  relay 
controller  installed  on  USS  CONSTELLATION  (CVA-64)  lower-stage  (LS)  #6  weapons  elevator.  The 
messsage  states  that  minimum  effort  is  required  to  troubleshoot.  Also,  when  problems  arise,  ships 
force  personnel  can  maintain  equipment  without  specialized  training.  The  message  originator  feels  that 
any  future  effort  to  develop  a  standard  weapons/cargo  elevator  controller  should  be  channeled  along  the 
lines  of  the  NAVSHIPYD  PUGET  relay  control. 

Relay  systems  are  not  superior  relative  to  overall  reliability  but  are  quite  acceptable  based  on  the 
usage  rate  of  shipboard  elevators.  Relay  systems  also  may  not  be  superior  in  relation  to  initial  cost. 
Initial  cost  was  found  to  be  the  driving  force  behind  commercial  applications  of  microprocessors.  Dis¬ 
cussions  with  US  Elevator  Company  Inc.  showed  there  really  was  no  overriding  reason  other  than  initial 
cost  for  using  microprocessors  in  commercial  elevators.  A  further  reason  which  came  out  very  clearly 
in  discussions  with  Digital  Electronics  Corporation,  Cutler  Hammer,  Otis  Elevator  and  US  Elevator  was 
that  the  elevator  industry  has  objectives  which  included: 

a.  the  need  to  fund  new  design  initiatives  by  the  company  in  addition  to  constructing  eleva¬ 
tors  to  print 

b.  manufacturers  in  general  have  no  interest  in  what  is  termed  injection  technology.  That  is 
to  say  they  do  not  wish  new  technology  alternatives  to  be  incorporated  into  existing 
designs  in  a  way  that  function  cards  can  be  simply  unplugged  and  new  technology  cards 
inserted  in  their  place 

c.  the  elevator  industry  bases  its  assumptions  on  general  commercial  procurement  practices. 
Petroleum  refining  companies,  for  example,  might  replace  controllers  every  five  or  six 
years  after  adequate  amortization  and  a  new  technology  level  develops.  They  frequently 
are  not  interested  in  self-maintenance,  and  rely  on  the  elevator  manufacturer  to  provide 
service  support  directly. 


It  was  found  that  the  commercial  manufacturers  look  upon  the  small  volume  of  Navy  work  as 
being  secondary  to  their  main  product  lines.  Because  of  this  there  is  always  the  attempt  to  mold  the 
Navy  objectives  to  suit  the  commercial  objectives  of  the  company:  At  the  very  least,  companies 
attempt  to  use  existing  product-line  equipment,  designed  with  other  objectives  in  mind,  in  Navy  con¬ 
struction  projects  where  clearly  the  requirement  may  be  for  something  else. 
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It  also  was  found  that  among  commercial  manufacturers  there  was  little  standardization  of  com¬ 
ponents,  subassemblies,  sensors,  voltage  levels,  technology  or  anything  else.  Because  of  this  it  was 
impossible  to  find  multiple  sources  for  anything  but  the  most  basic  components. 

Static-logic  and  microprocessor  systems  have  the  edge  in  space  and  weight  saving  but  the 
space/weight  required  for  all  forms  of  controller  considered  was  low  and  quite  uncritical  in  todays  war¬ 
ships.  In  fact,  a  small  amount  of  additional  space  can  be  tolerated  to  reduce  installation  complexity  and 
improve  maintainability.  Relay  controllers  were  clearly  quite  superior  in  terms  of  new  research  and 
development  effort  required  for  their  use. 

The  one  criteria  of  comparison  on  which  relay  controllers  in  the  past  have  required  specification 
waivers  was  in  the  area  of  s.'ock  limitations.  Military  electromechanical  relays,  which  will  withstand 
specified  shock  and  other  environmental  limits,  are  available  from  a  very  small  roster  of  sources.  On 
the  other  hand  the  unbalanced  masses  of  electromechanical  relays  result  in  their  frequently  not  being 
able  to  operate  without  an  intermittent  change  of  state  called  "contact  chatter"  during  the  passage  of  the 
shock  wave.  This  is  one  bad  feature  of  their  use  in  critical  elevator  systems.  It  takes  considerable  time 
to  manually  jog  a  large  weapons  elevator  on  an  aircraft  carrier  to  its  stow  position  should  the  relay  sys¬ 
tem  drop  out  during  an  initial  combat  encounter.  Because  of  this,  the  recommendation  is  made  that  an 
entirely  solid-state  relay  system  is  preferred.  Multipole  logic  solid-state  relays  are  not  available  com¬ 
mercially.  A  Navy  design  of  solid-state  relay  controller  would  thus  have  to  be  developed.  At  the 
present  time  it  would  seem  that  such  a  controller  could  be  designed  using  a  combination  of  small-scale 
integrated  circuits  with  functions  such  as  analog  switches,  tri-state  buffers,  opto-couplers  and  timers. 
All  of  these  functions  are  available  in  components  from  many  suppliers. 

The  following  comments  address  the  Navy’s  Standard  Electronics  Module  (SEM)  program.  At 
this  time  Standard  Electronic  Modules  exist  for  a  variety  of  TTL  and  CMOS  logic  functions,  a  series  of 
low  current  electromechanical  relays,  and  for  the  various  functions  involved  in  microprocessor  controll¬ 
ers  such  as  the  central  processor  unit  and  the  read-only-memory. 

There  are  many  desirable  features  in  the  Standard  Electronic  Module  program  and  much  to 
recommend  it.  Components  and  modules  are  tested  to  ensure  ultra-high  reliability.  The  objective  is 
toward  standardization  at  the  module  level.  Maintainability  is  handled  on  the  basis  of  throw  away 
modules.  Obsolescence  is  overcome  by  specifying  the  input/output  characteristics  of  modules  and  not 
the  technology  level  inside  the  module.  Supportability  is  achieved  by  attempting  to  obtain  competitive 
bidding  from  multiple  sources  for  the  procurement  of  each  module  batch.  Modules  are  constructed  to 
two  high  military  specification  levels  of  environmental  and  shock  requirement.  Existing  modules  are 
very  attractive  in  that  they  require  no  new  research  and  development  effort  and  are  quite  compact. 

Disadvantages  of  Standard  Electronic  Module  units  are  that  multiple  functions  on  one  unit  fre¬ 
quently  require  the  use  of  an  entire  unit  instead  of  one  particular  logic  gate.  The  existing  population  of 
modules  is  quite  small.  Although  manufacturers  list  SEMs  in  their  literature,  a  direct  contact  with  an 
order  to  buy  frequently  reveals  that  there  is  no  stock  of  such  components  and  that  long  delays  will  be 
experienced  while  modules  are  manufactured.  Modules  at  the  present  time  are  made  in  relatively  light 
quantities  and  hence  do  not  benefit  from  mass  production  discounts. 

Because  of  the  limited  range  of  SEM  vendors  the  recommendation  is  made  that  all  SEM  elevator 
controllers  should  be  compared  against  those  designed  at  the  component  level.  Components  can  be 
used  that  are  just  as  standard  and  just  as  supportable  as  SEM  modules.  Nevertheless,  there  is  much  to 
recommend  the  SEM  control  system. 

One  disadvantage  of  the  SEM  program  is  that  when  the  need  is  seen  to  arise  for  a  new  standard 
function  there  is  the  need  to  produce  a  new  Standard  Electronic  Module  to  handle  that  function.  This 
has  led  to  the  list  of  SEMs  growing  longer  each  year.  Many  of  the  SEMs  on  that  list  are  rather  special- 
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ized  with  small  total  populations  existing  in  service  or  in  the  supply  system.  In  the  present  case,  if  the 
recommendations  above  are  followed  it  would  be  possible  to  design  a  standard  module  as  a  multipole 
double-throw  solid-state  logic-level  relay.  Such  a  module  does  not  yet  exist. 

Since  this  is  the  case,  if  it  is  decided  that  the  preferred  system  should  use  Standard  Electronic 
Modules  and  require  no  new  development,  then  an  acceptable  solution  is  a  static-logic  SEM  controller 
using  existing  Standard  Electronic  Modules.  Such  a  system  has  been  proposed  by  the  Naval  Ship  Sys¬ 
tems  Engineering  Station  (NAVSSES),  Philadelphia.  This  controller,  in  many  ways,  would  be  similar 
to  that  installed  as  backfit  on  the  DD963  class  and  proposed  for  installation  on  the  CVA71. 

If  SEM  modules  are  not  used,  then  the  controller  design  will  run  up  against  all  of  those  problems 
which  have  been  solved  nicely  for  us  by  the  standard  modules,  namely  humidity,  temperature,  and 
other  marine  environmental  effects,  and  shock.  In  many  cases  it  is  possible  to  obtain  military 
specification  integrated  circuits  which  themselves  meet  the  environmental  and  shock  specifications  and 
these  should  be  used  where  available. 

One  solution  to  the  shock  requirement  is  that  the  controller  should  be  shock  mounted  as  a  unit  in 
preference  to  shock  mounting  individual  components  and  circuits  within  the  controller.  This  can  be 
made  to  satisfy  the  shock  specifications  in  regard  to  operation  of  the  controller  following  an  explosion. 
Shock  mounting  frequently  aggravates  vibration  problems,  however,  since  MIL-Spec  vibration  tests 
require  two  hours  performance  at  the  resonant  frequency. 

Use  of  components  that  do  or  do  not  change  state  during  passage  of  a  shock  wave  can  be  left  to 
the  designer  of  the  controller.  It  is  necessary  to  select  components  which  either  have  no  moving  parts 
or,  where  mechanisms  are  used,  they  are  (a)  properly  balanced  or  restrained  to  withstand  the  specified 
shock  limits,  or  (b)  will  operate  in  a  delayed  manner  that  makes  the  controller  transparent  to  the  effects 
of  shock-induced  contact  chatter. 

Controller  Fault  Detection 

Fault  detection  methods  in  controllers  reviewed  varied  widely  with  manufacturer.  Older  controll¬ 
ers  made  by  General  Electric  had  no  fault  isolation  circuitry.  On  one  ship  a  previous  electronics  techni¬ 
cian  had  hooked  up  a  glow-lamp  on  a  wire  probe  and  this  constituted  the  test  apparatus. 

The  Cutler  Hammer  controllers  both  as  installed  in  combatant  ships  and  new  developments  at  the 
plant  are  rated  highly  in  this  regard.  Logic  levels  are  shown  by  lights  which  usually  do  not  effect  the 
overall  reliability  of  the  controller  operation.  Older  versions  used  tungsten  lights  derated  in  voltage  by 
50%  while  newer  versions  used  light-emitting-diodes.  Shipboard  personnel  were  unanimous  in  praise 
for  this  aid  to  maintenance.  One  minor  criticism  was  that  the  lights  are  on  at  all  times  when  the  eleva¬ 
tor  power  is  turned  on  and  not  just  during  trouble-shooting  duties.  Because  of  this  the  fault  isolation 
lights  can  sometimes  be  failed  when  the  technician  arrives  to  perform  his  duties. 

The  elevator  system  manufactured  by  Unidynamics,  which  used  Standard  Electronic  Modules, 
provides  a  module  tester  as  part  of  the  controller  package.  In  this  case  there  were  no  lights  indicating 
the  logic  states  of  the  modules  while  in  operation. 

In  some  cases  commercial  controllers  which  use  relays,  use  a  form  of  relay  that  has  a  light- 
emitting-diode  incorporated  into  the  coil  circuit;  i.e.,  such  as  automated  bowling-alley  equipment. 
Several  elevator  controllers  developed  by  Puget  Sound  Naval  Shipyard  used  this  same  type  of  relay. 
Technicians  find  it  very  easy  to  maintain  controllers  using  relays  with  coil  lights.  Maintenance  can  usu¬ 
ally  be  accomplished  even  without  the  need  to  study  the  elevator  schematic  diagram  contained  in  the 
technical  manual. 
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The  recommendation  of  the  review  in  this  regard  is  that  new  specifications  should  require  (a)  that 
fault  isolation  circuitry  should  be  designed  into  the  controller  system  and  (b)  that  controller  module 
test  equipment  be  available  aboard  ship. 

Though  trouble-shooting  aids  are  desirable  at  the  controller,  it  must  be  emphasized  here  that  this 
feature  should  not  be  overdone  to  the  extent  that  the  reliability  of  the  trouble-shooting  aids  becomes  a 
significant  part  of  maintenance  of  the  elevator  controller  system.  Indicator  lights  of  the  type  used  by 
Cutler  Hammer  are  recommended  as  being  about  the  greatest  extent  it  is  necessary  to  go  in  this  direc¬ 
tion.  If  the  controller  design  permits  trouble-shooting  lights  to  be  turned  off  when  not  needed  then  this 
is  an  added  feature  but  not  essential. 

Trouble-shooting  circuitry  has  been  carried  to  great  lengths  aboard  commercial  passenger  aircraft. 
The  latest  design  of  Boeing  in  the  757  series  includes  many  ELOEC  variable  reluctance  sensors.  The 
sensors  are  used  to  indicate  that  undercarriages  are  down,  locked,  up  or  secured,  etc.  Each  sensor  has  a 
test  circuit  which  is  regularly  monitored  using  a  microprocessor.  Immediately  when  one  sensor  does 
not  respond  to  the  test  interrogate  an  indication  is  given  to  the  pilot  that  such  condition  exists.  This 
sophistication  in  the  monitoring  of  sensors  and  controllers  was  not  considered  necessary  aboard  ship  for 
the  reason  that  the  extra  circuitry  would  add  to  the  complexity  of  maintenance  of  the  elevator  and, 
since  fail-safe  design  is  used  for  shipboard  elevators,  casualties  to  sensors  or  controller  components  are 
generally  not  lifethreatening. 

Controller  Output  Drivers 

The  controller  output  performs  a  variety  of  functions  such  as  energizing  high  or  low  speed,  or  for¬ 
ward  or  reverse  power  contactors  of  the  main  elevator  motor,  driving  the  solenoids  which  operate 
hydraulic  valves,  and  turning  on  and  off  lights  that  indicate  the  elevator  position  and  safety  status. 

In  the  past  the  two  most  common  driver  outputs  of  controllers  have  been  either  through  an  elec¬ 
tromechanical  relay  or  by  means  of  driver  amplifier  cards.  A  considerable  margin  in  output  driver  per¬ 
formance  should  be  designed  into  the  controller  initially  to  permit  equipment  modifications  or  changes 
to  be  made  throughout  the  life  of  the  vessel  through  major  overhauls. 

The  driver  output  of  one  controller  system  in  particular  has  been  very  troublesome  and  the  reason 
is  as  follows.  Hydraulic  cylinders  which  operate  doors,  hatches,  etc.,  used  solenoid  valves  which  it 
became  necessary  to  replace  because  of  nonavailability.  The  new  solenoids  required  more  current  than 
the  old  and  at  first  this  resulted  in  blown  fuses  in  the  driver  section  of  the  controller.  The  shipboard 
staff,  noticing  that  fuses  were  blowing,  replaced  the  fuses  with  higher  current  varieties  where  upon  the 
output  driver  stages  burned  out. 

In  addition  to  being  able  to  provide  more  than  necessary  drive  capability,  a  desirable  additional 
feature  of  the  output  stage  of  the  controller  is  to  isolate  controller  electronics  from  the  output  electron¬ 
ics  and  in  this  way  provide  no«se  immunity  to  the  logic  operation  within  the  controller. 

The  recommendation  of  this  review  is  that  the  output  stage  of  controllers  should  be  through 
solid-state  relays.  Solid-state  relays  generally  are  optically  coupled  triacs  for  AC  operation  or  back-to- 
back  transistors  for  AC/DC  operation.  Many  manufacturers  make  versions  of  single-pole  single-throw 
relays.  Solid-state  relays  have  excellent  shock  resistance  and  military  versions  are  available.  FET  or 
bipolar  output  is  preferred  to  SCR  or  triac  because  of  non-self-triggering  characteristics. 

U.S.  Elevator  is  reluctant  to  use  triac  or  SCR  output  stages  for  passenger  elevator  systems  on 
grounds  of  safety.  The  writer's  feeling  is  that  relays  which  meet  MIL-R-28750  voltage  spike  and  tran¬ 
sient  levels  are  acceptable  for  shipboard  elevator  use.  For  most  applications  spurious  half-cycle  turn-on 
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is  quite  safe  (in  the  case  of  lights,  solenoids,  motors,  etc.).  The  use  of  solid-state  relay  outputs  to  the 
controller  provides  an  extra  flexibility  in  that  voltage  and  current  level  changes  to  output  devices  and 
displays  can  be  made  during  the  life  of  the  elevator  system  to  accommodate  new  developments  without 
disrupting  the  existing  elevator  system. 

Sensors  and  Signal  Transmission 

The  types  of  sensor  in  use  on  elevators  and  conveyors  by  the  Navy  and  in  commerce  were  more 
numerous  than  the  number  of  manufacturers  involved  and  probably  equaled  the  number  of  designers  at 
work  on  elevator  controllers.  Sensors  were  almost  never  directly  interchangeable  for  one  reason  or 
another.  Bolting  foundations  were  different,  sensing  techniques  were  different,  some  sensors  had  nor¬ 
mally  open  or  closed  relay  outputs,  some  had  logic  level  outputs,  some  sensors  had  trouble-shooting 
test  circuits,  signal  voltage  levels  varied  from  5  VDC  to  440  VAC,  some  operated  on  steel  or  copper 
proximity  targets,  some  by  interrupt  of  vanes.  The  physical  principles  involved  in  the  sensors  reviewed 
ii.cluded  simple  mechanical,  variable  reluctance,  eddy  current,  optical,  magnetic,  electrostatic  and 
acoustic.  Some  of  these  sensors  required  a  power  supply,  others  did  not. 

The  situation  regarding  sensors  is  worse  than  that  for  controllers,  if  that  is  possible.  Manufactur¬ 
ers  of  sensors  were  very  reluctant  to  disclose  even  the  most  basic  details  of  their  sensor.  They  all 
regarded  the  sensor  as  a  throw-away  item  requiring  replacement  from  the  manufacturer  for  any  mal¬ 
function.  Indeed,  the  electronics  of  most  sensors  were  potted  in  materials  designed  both  to  withstand 
abuse  in  the  field  and  to  discourage  on-site  maintenance.  The  writer  found  no  proximity  sensor  which 
was  an  industry  standard;  all  sensors  had  only  one  supplier  who  frequently  changed  his  product  line. 
An  engineer  in  the  Otis  Elevator  Company  told  me  they  rarely  used  the  same  sensor  on  two  elevators. 
You  would  think  that  sensors  would  be  standardized  within  the  same  company,  but  this  is  not  so.  Dis¬ 
cussions  with  other  manufacturers  including  US  Elevator  confirmed  this  conclusion. 

Visits  and  calls  to  the  Naval  Sea  Support  Centers  on  both  coasts  indicated  the  severe  problems  of 
replacing  sensors  as  they  become  obsolete.  The  present  policy  is  to  scan  the  market  for  yet  another 
sole  source  sensor  manufacturer  and  modify  whatever  is  necessary  to  make  it  fit.  This  can  be  very 
costly,  even  if  it  results  only  in  the  changing  of  every  support  bracket  or  target,  but  where  it  also 
involves  changes  to  voltage  levels  or  other  controller  circuitry  the  expense  can  be  really  high. 

The  conclusion  reached  from  the  sensor  survey  was  that  the  Navy  needs  to  develop  its  own  stan¬ 
dard  sensor.  The  sensors  considered  to  be  most  promising  for  further  investigation  included  those 
which  used  DC  or  permanent  magnetism  as  the  physical  property  to  be  sensed. 

Specifically  recommended  for  further  consideration  are  the  mechanical  magnetic  and  Hall-effect 
magnetometers.  A  new  technique  which  the  writer  could  not  find  in  any  commercial  sensor  and  which 
looks  to  be  very  attractive  would  be  based  on  the  flux-gate  magnetometer  principle.  Specific  recom¬ 
mendations  are  made  to  bread-board  such  a  sensor,  which  might  be  used  both  as  a  proximity  switch  and 
as  a  plane  detector.  Following  a  laboratory  demonstration  the  decision  would  be  made  on  whether  to 
develop  the  sensor  further  as  an  operational  prototype.  Indications  are  that  a  flux-gate  magnetometer 
would  overcome  all  iroblems  identified  in  sensors  during  the  visits  to  Navy  ships.  A  Navy  designed 
device  could  be  maintained  aboard  ship  and  also  have  standardized  signal  and  test  voltage  levels. 
Advantages  and  disadvantages  of  the  sensor  techniques  can  now  be  discussed. 

Standard  mechanical  limit  switches  are  regarded  very  highly  by  the  ships'  force.  In  some  elevator 
systems  they  are  the  only  sensors  used  for  all  functions.  On  those  elevators  that  use  proximity  switches 
they  are  still  used  for  detecting  over-travel  and  other  safety  features  as  a  second  sensor  technology  with 
different  failure  modes  to  the  first.  The  advantages  of  mechanical  limit  switches  are  that  they  are  an 
established  technology  and  are  not  greatly  expensive.  Disadvantages  are  that  they  have  arcing  contacts 
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in  hazardous  areas,  they  are  subject  to  corrosion  of  the  actuator  arm  and  shaft  seizing  in  marine 
environments,  and  actuator  arm  rotation  on  the  switch  shaft  is  possible  as  platform  sway  tolerances 
increas-  under  service  which  results  in  functional  errors  of  the  switch  from  that  point  on. 

It  has  been  found  from  experience  that  the  preferred  sensor  for  detecting  such  moving  objects  as 
elevators  and  related  mechanical  components  such  as  doors,  hatches,  locking  bars,  etc.  is  one  which  is 
not  physically  interfered  with  by  the  object  being  sensed. 

Variable  reluctance  sensors  using  inductance  bridges  are  found  on  existing  ships.  The  availability 
of  bridge  adjustment  or  nulling  controls  is  a  bad  feature.  The  Cutler  Hammer  sensors  provide  a  low- 
level  60  Hz  signal  to  the  control  panel  some  distance  away.  At  the  controller  there  is  a  preamplifier 
with  adjustable  gain  to  compensate  for  variations  in  RMS  line  voltage  on  different  ships.  This  often 
means  that  there  is  a  need  to  readjust  each  time  the  ship  goes  from  shore  to  ship  power,  however. 
Shipboard  personnel  frequently  do  not  understand  detailed  operational  characteristics  of  the  circuit  and 
will  make  arbitrary  adjustments  affecting  particular  sensors  in  an  attempt  to  find  the  cause  of  a  problem. 

Inductive  sensors  do  not  have  a  great  sensing  range.  When  a  sensor  is  adjusted  for  a  no-load 
elevator  condition,  tolerance  displacements  of  the  platform  under  load  can  cause  the  maintenance  peo¬ 
ple  to  suspect  the  null  or  sensitivity  adjustment  again.  It  is  recommended  that  standard  sensors  do  not 
have  any  need  for  fine  adjustment  by  ships'  force  personnel. 

Eddy  current  devices  are  already  used  in  elevator  controller  systems  and  were  the  most  trouble 
free  of  those  sensors  which  have  been  time-tested.  A  disadvantage  is  that  they  are  expensive  at  about 
SI  000  each.  These  sensors  initially  were  subject  to  electromagnetic  interference  at  radar  frequencies. 
The  manufacturer  modified  the  circuit  to  overcome  the  problem.  The  possibility  that  design 
modifications  will  be  needed  to  meet  military  specification  requirements  each  time  a  new  sensor  is 
selected  is  one  reason  for  recommending  a  Navy  standard  sensor.  Power  is  supplied  to  eddy  current 
devices  and,  generally,  logic-level  signals  are  generated.  Power  absorbed  by  the  eddy  losses  is  detected 
by  changes  in  the  oscillator  level. 

The  next  variety  of  sensor  examined  used  light  as  the  physical  property.  Older  passenger  eleva¬ 
tors  used  a  light  switch  extensively.  Discussions  with  the  manufacturers  revealed  that  these  are  being 
replaced  in  new  elevators  mostly  by  sensors  using  magnetism. 

In  recent  years  the  availability  of  light-emitting-diodes  and  photo-transistors  has  generated  a  new 
range  of  optical  sensors  both  in  the  visible  and  infrared  regions.  Some  sensors  use  continuous  light  and 
some  pulsed  light.  Pulsed  light  sensors  are  preferable  where  sunlight  interference  is  a  possibility.  Such 
sensors  which  extract  an  AC  component  from  the  light  pulses  are  used  extensively  in  the  logging  indus¬ 
try  ou  conveyors. 

Continuous  light  sensors  have  already  been  used  on  Navy  ships  both  for  dumbwaiter  stores  con¬ 
veyors  and  on  small  strike-down  weapons  elevators.  The  sensors  are  not  expensive  but  are  found  to 
have  a  variety  of  problems  which  make  their  future  use  not  recommended.  They  are  of  course  very 
susceptible  to  malfunction  from  dirt,  grime,  or  smoke  obscuring  the  light  or  detector  window.  This  is 
the  main  reason  that  commercial  passenger  elevators  do  not  use  them  any  longer. 

On  shipboard,  the  stores  conveyor  safety  sensor,  which  frequently  is  a  light  sensor,  is  the  area  of 
shipboard  conveyors  which  receives  the  most  maintenance  effort.  Other  disadvantages  of  light  sensors 
are  that  the  photo-transistor  is  receptive  to  a  wide  range  of  frequencies  and  is  difficult  to  shield  against 
electromagnetic  interference.  This  is  despite  the  narrow  band  of  frequencies  generated  by  the  light- 
emitting-diode  source.  Light  sensors  presently  on  ships  must  be  protected  during  painting  operations. 
Even  paint  mist  in  the  air  will  affect  the  optical  window.  Cleaning  of  the  paint  was  found  ineffective 
owing  to  the  interaction  of  the  solvent  with  the  window  material.  Sensors  are  now  generally  replaced  at 
considerable  expense  when  malfunction  fo'lows  painting  operations  near  the  elevator. 
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Optical  sensors  are  available  that  use  a  reflector  or  set  the  transmitter  and  receiver  opposite  each 
other  across  a  gap.  Those  that  use  a  reflector  depend  upon  the  reflector  being  kept  clean.  The  ones  in 
"IT  configuration  can  be  subjected  to  physical  damage  when  struck  by  the  operating  vane  on  elevators 
where  sway  tolerances  increase  due  to  wear  during  service  life.  There  are  some  inductive  sensors  that 
also  take  this  "IT  form  with  vane  operation.  In  general  a  horseshoe  or  caliper  shaped  sensor  is  not  the 
most  preferred  geometry.  Sensors  that  operate  across  a  gap  to  a  flat  target  have  the  best  record  of  sur¬ 
vivability. 

One  subset  of  optical  sensors  that  was  considered  made  use  of  fiber-optics  in  the  transmitting  and 
receiving  circuitry.  Fiber-optics  is  an  exciting  new  concept  that  virtually  eliminates  EMI  on  the 
transmission  link.  Some  installation  problems,  especially  at  the  coupling  of  fiber-optic  cables,  are  still  at 
the  forefront  of  technology,  but  the  use  of  fiber-optics  was  given  serious  consideration.  With  a  fiber¬ 
optic  sensor  system  the  emitter  or  emitters  could  be  located  at  the  control  panel  and  light  or  infrared 
radiation  conducted  through  the  fibers  to  the  sensor,  across  a  gap,  and  back  to  the  controller. 

Many  of  the  disadvantages  of  light  sensors  would  also  affect  fiber-optic  sensors.  They  could  mal¬ 
function  in  dirty  environments  or  where  painting  was  taking  place.  A  horseshoe  configuration  or 
reflector  would  be  necessary.  Continuous  light  varieties  would  be  subject  to  interference  at  open  deck 
hatches  by  daylight  radiation.  Pulse  modulated  light  would  not  avoid  detector  saturation. 

Except  for  the  Puget  Sound  Naval  shipyard  relay  controller  there  was  no  evidence  on  any  system, 
whether  Navy  or  commercial,  that  interference  on  the  signal  lines  was  a  severe  problem.  In  one  system 
using  5  VDC  logic,  capacitors  were  backfitted  to  all  sensor  lines.  Following  this  action  the  signal  noise 
problems  were  not  noticed. 

Since  signal  line  noise  appears  to  be  not  a  significant  problem  aboard  ship,  it  does  not  seem 
justified  to  recommend  a  change  at  this  time  to  a  technolgy  such  as  fiber-optics  which  would  need  a 
new  infrastructure  of  spare  parts  and  logistics.  The’ present  multiconductor  twisted  shielded  pair  cable 
system  is  simple,  inexpensive,  and  time-tested.  Standard  cables  used  for  many  other  Navy  functions 
such  as  the  telephone  can  be  used.  Finally  there  would  be  no  need  for  new  training  in  an  area  that  can 
get  along  very  well  without  the  necessity  for  new  training. 

Next  the  discussion  turns  to  sensors  using  DC  magnetism.  Magnetic  sensors  fall  into  two 
categories:  those  using  DC  flux  termed  magnetometers,  and  those  using  AC  fluctuations  which  come 
under  the  variable  reluctance  heading. 

The  DC  magnetic  sensors  in  general  have  superior  characteristics  to  other  sensors.  They  can  fre¬ 
quently  be  used  with  simple  ferrous  targets.  Even  when  a  permanent  magnet  target  is  necessary  it  is 
not  a  complexity  that  requires  much  understanding  or  adjustment  of  attitudes.  Signal  conditioning  elec¬ 
tronics  in  magnetic  sensors  can  generally  be  protected  from  electromagnetic  and  electrostatic  interfer¬ 
ence  behind  metallic  screening  material.  Magnetic  flux  interference  on  ships  tends  to  be  cyclical  in 
nature  at  either  60  cycles  or  radio  frequencies.  This  is  a  further  reason  why  steady  state  flux  sensors 
are  regarded  to  be  superior.  Ship  residual  magnetism  and  earth  magnetism  are  usually  of  such 
strengths  that  they  readily  can  be  isolated  from  the  signal. 

One  type  of  magnetometer  uses  the  Hall  effect.  Why  such  sensors  have  never  been  used  on 
elevators  is  probably  due  to  the  small  sensing  distance  of  Hall-effect  transducers.  Since  the  Hall-effect 
voltage  is  very  small,  either  large  magnetic  fields  or  high  gain  circuits  must  be  used  in  order  to  effect  a 
detection.  Although  Hall-effect  transducers  are  made  by  several  manufacturers,  complete  sensor  pack¬ 
ages  could  be  found  made  by  only  one  company.  This  sensor,  as  for  most  others,  cannot  be  repaired 
aboard  ship. 
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Magnetic  reed  and  mercury  switches  were  briefly  considered.  The  reed  switches  were  rejected  on 
the  grounds  of  unbalanced  masses.  Reed  switches  have  a  contact  welded  to  a  ferrous  leaf  spring.  The 
magnetic  attraction  at  the  air  gap  causes  the  contacts  to  attract  each  other  against  the  resilience  of  the 
springs.  Normal  magnetic  mercury  switches  are  unsuitable  to  shipboard  use  since  the  mercury  would 
move  with  the  motion  of  the  ship.  A  new  kind  of  mercury  relay,  recently  on  the  market,  involves  a 
thin  film  of  mercury.  This  switch  can  be  operated  in  any  position  as  opposed  to  the  earlier  varieties. 
Magnetic  mercury  switches  were  not  considered  further  since  the  use  of  mercury  aboard  ship  is  barred 
by  MIL-E-17807. 

One  kind  of  mechanical-magnetic  switch  reviewed  uses  two  permanent  magnets,  one  with  greater 
strength  than  the  other.  A  balanced  armature  with  gold  plated  contacts  in  a  hydrogen  filled  enclosure 
provides  a  double  throw  switch.  As  ferrous  material  or  a  permanent  magnet  is  passed  near  the  arma¬ 
ture,  flux  is  robbed  from  the  stronger  of  the  magnets  permitting  the  less  strong  magnet  to  effect  the 
switching.  This  sensor  has  very  few  disadvantages  and  considerable  advantages.  It  has  no  preamplifier 
electronics  in  the  head  and  uses  no  power  supply.  The  initial  cost  is  low,  (less  than  S100)  and  the  sens¬ 
ing  distance  is  up  to  20  mm.  There  is  no  provision  for  remote  troubleshooting,  however,  and  repair  of 
the  sensor  on  board  ship  is  not  practical.  Here  again  there  is  only  one  manufacturer  of  the  sensor  and 
so  we  are  back  to  the  sole  source  and  product  obsolescence  problems  once  again. 

The  recommendation  of  this  review  concerning  mechanical-magnetic  switches  is  that  they  could 
quite  easily  satisfy  all  requirements,  provided  (a)  the  switch  was  made  to  a  Navy  design  for  production 
by  multiple  sources  in  competition  and  (b)  remote  test  circuitry  is  incorporated.  Although  electrostatic 
and  acoustic  sensors  are  feasible,  no  commercial  versions  were  found  that  were  entirely  suitable. 

Turning  to  the  subject  of  signal  voltages,  it  was  previously  stated  that  signal  levels  reviewed  varied 
from  5  VDC  to  440  VAC. 

There  seems  to  be  little  reasoning  behind  the  selection  of  voltage  levels  The  use  of  440  VAC  on 
sensors  and  push  buttons  very  nearly  resulted  in  a  serious  accident  aboard  one  class  of  Navy  ship  when 
a  weapons  pallet  broke  loose  and  severed  high  voltage  sensor  cables.  Systems  using  115  VAC  were 
common  at  one  time  on  combatant  ships  and  high  voltage  DC  systems  are  quite  common  in  commer¬ 
cial  elevators. 

At  the  other  end  of  the  scale  a  few  manufacturers  use  5  VDC  because  of  its  compatibility  with 
TTL  logic  used  for  the  controller  electronics.  Systems  using  5  V  tend  to  be  less  immune  to  noise 
interference  than  systems  operating  at  higher  voltage  levels.  Signal  transients  of  1000  V  have  been 
measured  and  must  be  considered,  especially  if  signals  go  to  or  come  from  unisolated  TTL  gates. 
There  is  another  disadvantage  of  using  5  VDC  directly  interfaced  into  TTL  logic.  These  TTL  systems 
are  activated  by  a  contact  to  ground.  When  a  TTL  gate  is  left  open  it  normally  floats  high.  Since  a 
stopping  operation  is  not  performed  on  a  high  level  but  on  a  ground,  when  malfunctions  occur  (such  as 
sensor  power  interrupt)  or  signal  lines  are  cut  accidentally  causing  an  open  circuit,  the  controller  reads 
the  sensor  as  safe.  Navy  specifications  require  the  voltage  to  be  normally  high  for  safe  signals. 

A  few  controllers  examined  used  low  voltage  AC  signal  levels  (24  VAC)  but  owing  to  the  greater 
variety  of  relays  operating  from  DC  by  far  the  majority  of  designers  use  DC  signal  circuits  in  the  range 
of  15  to  27  V.  These  voltages  over  the  years  have  shown  to  give  little  trouble  regarding  noise  pick-up 
on  the  signal  lines,  they  are  not  hazardous  to  the  health  of  the  maintenance  personnel  involved  in  trou¬ 
bleshooting,  they  can  be  readily  provided  by  commercial  power  supplies  or  in  some  cases  by  simple 
rectifier  circuits,  and  a  variety  of  electronic  components  both  electromechanical  and  solid-state  are  avail¬ 
able  that  will  operate  on  them  directly  without  voltage  level  transformations. 

It  is  recommended  that  a  standard  Navy  shipboard  elevator  sensor  voltage  level  be  selected 
between  15  and  24  VDC.  Signals  and  signal  return  should,  wherever  possible,  be  run  as  twisted  pairs 
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into  differential  devices  such  as  coils,  transformers  or  opto-couplcrs,  to  isolate  the  controller  electronics 
from  sensor  electronics  and  provide  noise  immunity  to  sensor  sig  tais.  It  is  also  necessary  to  treat  test 
circuits  to  the  sensors  in  the  same  manner  as  signal  lines  since  noise  picked  up  on  test  circuits  will 
activate  the  sensor  in  just  the  same  way  as  the  elevator  target. 

Push  Buttons  and  Lights 

Conclusions  of  the  problem  analysis  on  the  selection  of  devices  for  transmitting  operator  com¬ 
mands  on  elevators  indicated  that  very  little  could  fault  the  present  make-break  contact  of  the  push  but¬ 
ton  system.  Not  one  elevator  failure  on  all  ships  examined  was  attributed  to  malfunction  of  the  com¬ 
mand  subsystem.  There  was  also  no  obvious  evidence  of  electromagnetic  interference  on  the  command 
transmission  lines. 

Certain  commercial  elevators  use  the  same  switches  for  push  buttons  as  are  used  in  the  sensing  of 
elevator  position,  door  interlocks,  etc.  The  Unidynamics  Corporation,  who  developed  an  infrared 
photo-proximity  sensor  compatible  with  TTL,  used  the  same  device  for  both  command  and  signal  func¬ 
tions  throughout  their  commercial  elevator  systems.  In  the  command  function  spring-loaded  push  but¬ 
tons  with  vanes  were  built  into  the  switch  to  interrupt  the  passage  of  light  from  an  emitter  to  a  photo- 
transistor.  Other  manually  operated  switches  based  on  proximity  techniques  have  been  developed  bv 
makers  of  Hall-effect  devices.  Microswitch  Incorporated  has  several  push-button  and  other  switch  types 
using  solid-state  electronics  and  Hall-effect  magnetic  sensors. 

The  conclusion  on  command  devices  was  that  conventional  push  buttons  are  quite  acceptable. 
There  is  very  little  to  go  wrong  with  a  push-button  circuit  and,  provided  it  can  be  made  to  withstand 
the  requirements  of  shock  specifications,  it  is  sufficiently  reliable  for  elevator  purposes,  easily  maintain¬ 
able,  readily  available  and  not  subject  to  technical  obsolescence.  The  idea  of  using  sensor  technology 
for  command  devices  at  first  sight  appears  attractive,  especially  from  the  issues  of  standardization  and 
minimization  of  parts  to  be  stocked,  but  this  writer  considers  that  the  best  circuit  to  use  should  be  one 
that  works  and  passes  all  other  elevator  criteria  while  being  as  simple  as  possible. 

High  technology,  manually  operated,  switches  which  are  not  similar  to  the  sensor  are  not  recom¬ 
mended  since  they  have  no  attractions  in  regard  to  parts  standardization  and  add  complexity,  mainte¬ 
nance,  and  training  problems  to  the  elevator  system.  Such  devices,  which  are  frequently  becoming 
common  in  the  case  of  commercial  elevators,  are  capacitance  switches  which  activate  upon  the  capaci¬ 
tance  change  of  an  operator’s  fingers.  Such  switches  aboard  combatant  ships  could  readily  be  designed 
to  withstand  shock,  but  it  would  mean  that  a  person  wearing  gloves  might  have  to  remove  these  gar¬ 
ments  to  operate  the  elevator. 

The  next  subject  to  be  dealt  with  in  this  discussion  concerns  display  lights  used  throughout  the 
elevator  system.  The  recommendation  is  made  that  there  should  be  clear  indication  by  means  of  lights 
of  the  whereabouts  of  the  elevator  at  all  times.  This  was  not  the  case  in  the  past  where  lights  would 
indicate  that  the  elevator  had  arrived  at  a  particular  level,  but  when  the  elevator  was  between  decks  no 
lights  were  activated.  When  elevator  malfunction  occurred  while  passing  through  these  blacked-out 
zones,  it  was  frequently  difficult  for  maintenance  personnel  to  determine  exactly  where  the  elevator 
was.  They  would  usually  know  where  it  started  from  and  to  which  deck  it  was  sent,  but  an  exact  deter¬ 
mination  of  its  location  frequently  required  that  trunk  doorways  be  opened  so  that  a  visual  inspection 
could  be  made.  Future  elevator  systems,  at  least  at  the  master  control  point,  should  light  two  lights  for 
both  above  and  below  the  position  of  the  platform  while  the  elevator  is  in  transit  between  decks  and 
one  light  when  the  platform  has  arrived  at  a  particular  deck. 

Voltages  used  for  elevator  indicator  lights  in  the  past  have  been  just  as  varied  as  voltages  used  for 
the  controllers.  Very  often  voltages  used  for  the  lights  are  different  from  those  used  by  the  controller. 
The  most  common  voltages  were  115  VAC,  24  VAC,  24  VDC  and  15  VDC.  There  is  some  evidence 
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that  tungsten  lights  operated  from  DC  have  a  longer  mean  time  between  failure,  but  the  difference  is 
not  sufficient  to  give  it  much  consideration  in  design.  Other  lighting  techniques  considered  used  gas- 
discharge  lamps  and  light-emitting-diodes. 

Small  neon  lamps  and  LEDs  have  the  disadvantage  of  being  not  very  bright.  Many  commercial 
elevators  are  now  using  large  dimension  LEDs,  but  commercial  elevator  foyers  are  often  quite  darkened 
and  the  lights  do  not  need  to  be  seen  from  any  great  distance.  A  further  disadvantage  of  both  neon 
and  LED  lighting  is  the  necessity  to  provide,  in  some  cases,  a  separate  power  supply.  In  the  case  of 
LEDs  there  are  no  industry  standards  for  large  dimensioned  displays,  with  each  manufacturer  making 
different  sizes  with  different  pin  configurations.  To  use  LEDs  would  bring  with  it  the  problems  of  sole 
source  supply  and  the  need  to  increase  the  inventory  of  different  items  stocked  in  the  Navy  supply  sys¬ 
tem.  An  advantage  of  neon  discharge  and  LED  light  displays  is  that  they  are  usually  more  reliable  and 
have  higher  mean-time-between-failure  than  tungsten  lighting  In  this  writer's  opinion,  however,  the 
advantages  do  not  outweigh  the  disadvantages  at  this  time. 

The  recommendation  is  made  that  tungsten  lighting  be  used  for  elevator  displays.  Tungsten  lights 
are  readily  available  and  bulb  replacement  is  a  simple  matter  for  maintenance  engineers.  The  one 
disadvantage  of  short  operating  life  needs  to  be  addressed  separately.  Two  solutions  can  be  suggested 
in  this  regard.  One  is  to  provide  two  bulbs  at  every  location  so  that  a  change  in  light  level  will  attract 
attention  and  indicate  the  need  to  replace  a  bulb.  Another  method  is  to  use  a  derated  voltage  for  the 
bulb  selected.  For  example,  a  transformer  providing  80  VAC  could  be  used  on  1 15  VAC  lamps. 

Since  a  15-24  VDC  supply  is  recommended  for  signal  circuits,  a  logical  recommendation  for  the 
lights  is  to  use  15-24  VDC  for  the  supply  with  28- V  lamps.  A  15-24  VAC  system  could  also  be  used. 

Interlock  and  Other  Safety  Indicators 

A  special  variety  of  indicator  lights  is  necessary  in  the  case  of  the  safety  system.  Door  interlocks 
are  frequently  connected  in  series  with  one  "GO"  or  "NO  GO"  interlock  sensor  permissive  to  the  con¬ 
troller.  Discussions  with  personnel  aboard  ships  visited  indicated  that  this  design  arrangement  can  fre¬ 
quently  result  in  increased  elevator  down-time.  It  is  perfectly  acceptable  from  a  safety  point  of  view, 
but  the  troubleshooter  at  the  controller  sees  simply  the  presence  or  absence  of  the  interlock  signal.  If 
the  signal  is  absent  it  means  that  one  of  the  doors  in  the  interlock  daisy  chain  may  be  open  Since  he 
doesn’t  know  which  door,  and  there  may  be  many  levels  with  two  doors  on  each  level,  the  problem  in 
locating  the  fault  is  not  trivial.  The  way  this  is  usually  done  is  to  open  one  of  the  doors  and  look  up 
and  down  the  shaft  for  light  entering  through  a  door  not  closed.  Where  the  doors  are  closed  but  are 
not  activating  the  interlock  sensor,  or  where  the  sensor  itself  is  defective,  the  above  method  of 
troubleshooting  does  not  work.  In  this  case  the  Electricians  Mate  must  crawl  around  inside  the  eleva¬ 
tor  shaft  up  and  down  through  maybe  four  or  five  deck  levels  looking  for  the  problem. 

To  correct  this  situation  the  recommendation  is  made  that  is  should  be  possible  to  test  and 
observe  the  status  of  every  interlock  sensor  from  the  location  of  the  controller  or,  at  the  very  least,  in 
groups  at  each  deck  level. 

Controller  and  Sensor  Shock  Requirements 

The  discussion  so  far  has  already  covered  shock  to  some  extent  as  it  affects  controller  components 
and  sensors.  There  still  remains,  however,  the  need  to  address  the  question  of  shock  requirements  as 
they  should  be  written  into  elevator  construction  specifications. 

Other  requirements  of  military  tested  equipment  such  as  for  humidity,  temperature,  altitude,  etc., 
are  properties  which  are  important  but  may  not  be  terribly  significant  for  the  components  of  elevator 
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controllers,  which  are  usually  well  protected  from  both  the  environment  and  elevated  temperatures. 
The  one  specification  requirement  which  in  the  past  has  presented  some  difficulty  is  shock. 

Important  elevator  systems  on  combatant  ships  are  Grade  A  equipment.  Grade  A  equipment 
must  withstand  shock  loadings  without  significant  effect  on  performance.  Whether  the  equipment 
should  function  during  and  after  or  only  after  a  shock  is  left  to  the  writer  of  the  particular  ship 
specification. 

In  the  past,  some  elevator  systems  have  been  able  to  operate  both  during  and  after  a  shock,  while 
the  majority  are  designed  to  be  undamaged  as  the  result  of  the  shock  but  malfunction  during  a  shock 
owing  to  change-in-state  of  controller  components.  This  is  especially  true  of  electromechanical  relay 
controllers  that  have  unbalanced  contact  masses.  It  is  the  writer’s  opinion  that  a  firm  new  statement  of 
requirements  for  elevators  in  the  shock  environment  is  necessary  which  clarifies  the  specification  situa¬ 
tion. 


The  following  recommendation  is  made  based  on  discussions  held  as  part  of  this  review.  Elevator 
systems  should  be  made  transparent  to  shock  pulses  lasting  less  than  20  ms.  Controller  DC  power  sup¬ 
plies  should  be  provided  with  sufficient  capacitor  filtering  so  that  an  interruption  of  power  of  20  ms  will 
not  cause  the  loss  of  memory  of  controller  logic  units.  Interruptions  of  less  than  20  ms  in  the  main 
power  to  the  elevator  motors  can  be  ignored.  At  the  elevator  component  level  solid-state  assemblies 
are  least  affected  by  short  durations  of  shock  pulse. 

Where  electromechanical  relays  are  used  they  should  be  designed  into  the  circuit  with  this 
requirement  in  mind.  The  addition  of  sample  and  hold  temporary  memory  for  important  logic  elements 
is  one  method  that  could  be  considered  with  others,  in  designing  controllers  to  provide  shock  tran¬ 
sparency.  Another  technique  would  be  to  use  some  form  of  rotary  relay  or  rotary  stepping  switch  with 
integral  components  effectively  balanced  against  the  effects  of  shock.  The  orientation  of  the  relay  can 
be  a  factor  since  athwartships  shock  is  approximately  one  half  of  the  vertical,  and  the  longitudinal  shock 
one  half  again.  No  allowance  is  made  for  this  in  MIL-S-901,  however. 

The  next  shock  requirement  deals  with  power  outages  to  the  controller  lasting  longer  than  20  ms. 
The  effects  of  shock  on  main  circuit  breakers  could  be  to  effect  a  disconnect  which  would  have  to  be 
reestablished  manually.  In  this  case  power  to  the  controller  could  be  out  for  several  minutes  while  the 
problems  in  power  distribution  were  determined  and  rectified.  Power  outages  to  the  controller  longer 
than  20  ms  should  cause  the  elevator  to  stop.  On  some  ships  forklift  trucks  on  weapons  elevators  are 
manned  between  decks,  despite  regulations  to  the  contrary.  In  the  dark  and  confusion  of  a  power 
outage  people  could  be  moving  around  in  the  elevator  trunk  when  the  power  is  reinstated.  It  seems, 
for  this  and  other  reasons,  to  be  undesirable  that  the  elevator  should  automatically  dispatch  with  the 
resumption  of  power.  Weapons  elevators  operate  in  this  manner  now,  since,  with  a  power  outage,  they 
lose  the  memory  function  of  what  it  was  they  were  doing. 

At  the  present  time,  when  a  power  failure  occurs  while  the  elevator  is  in  operation,  the  usual 
practice  is  to  jog  the  elevator  to  the  nearest  deck  level  and  then  turn  over  control  to  the  operator  at  the 
deck  or  master  control  who  then  "sends"  or  in  some  special  cases  "calls"  the  elevator  to  the  next  desired 
location.  It  is  considered  that  this  reestablishment  of  automatic  control  by  initializing  the  elevators  is 
time  consuming  and  could  be  disastrous  in  the  event  of  an  unexpected  hostile  attack.  The  sending  of 
large  elevators  to  the  "stow"  location  and  the  closing  of  hatches  is  an  essential  feature  of  the  integrity  of 
aircraft  carriers  as  a  defense  against  nuclear,  chemical  and  biological  warfare. 

It  is  recommended  that  the  elevator  system  be  such  that  when  an  elevator  "goes  down"  between 
levels  it  is  not  necessary  to  perform  the  jogging  function,  but  that  the  elevator  will  dispatch  when  the 
power  is  restored  upon  depression  of  "send"  or  "call”  buttons  at  normal  operator  stations. 
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To  do  this  it  will  be  necessary  for  the  platform  to  be  passed  from  sensor  to  sensor  or  target  to  tar¬ 
get  as  it  proceeds  through  the  trunk,  with  no  gaps.  Some  form  of  absolute  counting  shaft-encoder  also 
could  be  used.  To  make  the  system  absolute  the  count  would  need  to  be  retained  through  power 
outages.  Navy  practice  with  shaft-encoders  has  been  good  on  certain  ships  and  bad  on  others.  Because 
of  the  complexity  of  shaft-encoders  and  the  difficulty  of  detecting  failures  in  them  it  is  recommended 
that  future  systems  be  considered  that  do  not  use  the  shaft-encoder  sensor  technique.  Continuous 
monitoring  of  the  elevator  using  trunk  or  plaiform  mounted  sensors  could  be  achieved  either  by 
extending  the  length  of  targets  or  adding  a  small  number  of  extra  sensors.  With  positive  determination 
regarding  the  position  of  the  elevator  when  power  is  restored  (as  shown  by  elevator  lights  being  lit  for 
both  levels  between  which  the  elevator  came  to  rest),  "send  to  stow"  or  some  other  command  could  be 
activated  following  the  determination  that  it  was  safe  to  move  the  elevator  to  the  selected  level.  This 
feature  would  be  in  addition  to  the  other  requirements  normally  found  in  elevator  specifications.  For 
the  case  where  there  is  no  controller  power  interruption  but  logic-level  components  can  change  state 
during  a  long  transient,  as  during  a  nuclear  explosion,  the  same  criteria  should  govern  as  for  a  power 
failure. 

Explosion  Proofing 

The  present  requirement  in  elevator  specifications  is  that  switches,  sensors  etc.,  will  be  explosion- 
proof  where  they  are  required  to  be  positioned  in  particular  hazardous  locations  aboard  Navy  ships. 
Such  locations  are  areas  where  there  could  be  an  accidental  spill  of  aviation  gasoline  or  in  weapons 
magazines  where  powder  is  carried  separately  or  where  hypergolic  chemicals  may  be  present. 

Powder  magazines  have  passed  into  history  and  present  plans  call  for  the  retirement  of  all  naval 
aircraft  using  aviation  gasoline,  in  the  near  future.  On  future  aircraft  carriers  and  most  other  surface 
ships,  the  only  requirement  for  explosion-proofing  will  be  in  the  vicinity  of  hypergolic  propellent  mis¬ 
siles  and  fuel  air  explosive  bombs. 

Since  there  is  still  a  continued  requirement  for  explosion-proofing  of  electronics,  there  is  a  need 
to  discuss  this  aspect  of  controller  electronic  design.  The  explosion-proofing  of  equipment  particularly 
applies  to  such  components  as  switches  with  make  and  break  or  sliding  contacts.  On  aircraft  carriers 
where  avgas  spills  could  occur  in  the  elevator  trunk  potted  proximity  switches  have  been  used  which 
meet  explosion-proofing  requirements.  Push  buttons  are  the  major  concern  and  these  are  generally 
located  outside  the  specified  area  of  hazard.  Where  this  was  not  possible,  explosion-proof  push-button 
containers  were  used.  Mechanical  actuator  limit  switches  are  also  available  in  explosion-proof  contain¬ 
ments. 

Explosion-proofing  using  heavy  containers  is  accomplished  by  permitting  gasses  within  the 
chamber  to  be  ignited  by  the  spark  of  make-and-break  contacts.  The  chamber  is  designed  to  withstand 
the  initial  pressure  whereupon  the  burnt  gas  is  released  to  the  outside  hazardous  environment  in  a  con¬ 
trolled  fashion  designed  to  insure  sufficient  cooling  so  that  explosion  external  to  the  chamber  cannot 
occur. 

Disadvantages  of  explosion-proofed  push  buttons  and  sensors  are  the  limited  number  of  manufac¬ 
turers,  the  cost  of  the  enclosures,  and  the  weight  and  bulkiness  of  the  resulting  switches.  Explosion¬ 
proofing  does  not  protect  against  shorting  of  the  interconnecting  cables  of  the  elevator  system  as  a 
result  of  weapons  damage.  Explosions  could  result  if  cables  were  severed  and  grounded  just  as  if  the 
explosion-proof  containers  did  not  exist.  To  clarify  the  problem,  it  should  be  noted  that  the  elevator 
controller  and  most  of  the  elevator  circuitry  is  outside  of  any  hazardous  environment  and  is  not  affected 
by  these  requirements. 

Now  that  we  have  established  that  there  will  continue  to  be  a  requirement  for  explosion-proofing 
on  Navy  ships  of  the  future,  the  discussion  centers  on  which  is  the  best  way  to  achieve  that  objective. 
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The  present  solution  is  not  very  satisfactory,  but  neither  would  be  an  inflexible  edict  to.  for  example, 
use  only  solid-state  push  buttons  and  switches,  when  simple  make-and-break  contacts  are  much  easier 
to  maintain  and  cost  less. 

The  answer  lies  in  a  technique  which  has  been  used  for  many  years  and  is  now  known  under  the 
heading  of  Intrinsic  Safety.  Intrinsically  safe  circuits  limit  voltage  and  current  in  such  a  manner  that  it 
is  not  possible  to  cause  an  explosion  when  particular  hazardous  chemicals  or  materials  are  present. 
Another  term  used  is  nonincendiary  and  the  difference  between  the  two  is  as  follows.  Nonincendiary 
circuits  are  used  where  we  wish  to  protect  against  explosion  under  normal  operation  of  the  equipment. 
Intrinsically  safe  circuitry  is  used  where  we  wish  to  protect  against  explosion  during  abnormal  operation 
of  the  equipment. 

Intrinsic  barriers  for  voltage  and  current  overload  provide  double  protection  using  devices  which 
have  different  failure  mechanisms.  An  illustration  of  this  is  that  for  over-current  protection  we  might 
consider  both  resistors  and  fuses. 

There  is  a  US  National  Electrical  Code,  and  a  US  Coast  Guard  code  in  the  Federal  Regulations,  in 
addition  to  Instrument  Society  of  America  recommended  practices  in  this  area  but  there  is  no  Military 
Standard  or  specification.  It  is  recommended  (outside  of  the  scope  of  this  project)  that  a  Military  Stan¬ 
dard  be  written  addressing  the  subject  of  intrinsically  safe  circuitry  for  use  in  hazardous  environments 
on  combatant  ships. 

A  number  of  commercial  manufacturers  in  the  United  States  make  intrinsic  barriers  approved  by 
Factory  Mutual,  and  they  have  been  used  in  such  areas  as  on  ferrys  carrying  cars  with  gasoline  in  their 
tanks  and  in  the  pump  rooms  of  oil  tankers.  They  have  recently  been  extensively  used  on  oil-drilling 
and  production  rigs,  especially  in  the  North  Sea.  There  is  some  use  of  the  barriers  already  aboard  war 
ships,  especially  protecting  the  circuits  to  sensors  detecting  the  elevation  of  oil  in  fuel  tanks.  It  is 
recommended  that  in  places  presently  calling  for  explosion-proofing  in  elevator  specifications,  the  alter¬ 
native  is  allowed  to  the  use  of  intrinsically  safe  circuits  as  is  customary  practice  in  Coast  Guard  regula¬ 
tions. 


In  the  case  of  elevator  controllers,  the  designer  would  be  able  to  consider  providing  barriers  to 
those  push  buttons,  lights,  and  sensors  inside  hazardous  locations,  or  where  the  total  power  consump¬ 
tion  of  the  elevator  controller  system  falls  below  the  critical  level;  one  barrier  at  the  front  end  of  the 
power  supply  to  the  entire  controller  might  be  acceptable.  Barriers  could  be  either  commercial  or  to 
special  design.  There  are  sufficient  commercial  manufacturers  available  that  supply  problems  in  the 
future  are  not  likely  to  materialize.  Since  stored  energy  within  a  circuit  is  a  major  factor  in  its  intrinsic 
safety,  sensor  and  driver  circuits  of  the  controller  should  be  made  as  nearly  totally  resistive  as  possible 
where  the  unit  being  sensed,  indicated,  or  controlled  is  in  a  hazardous  area. 

Elevator  Specification 

The  present  specification  for  shipboard  weapons  and  cargo  electromechanical  elevators  (MIl-E- 
17807B  (SH) )  presents  articles  which  in  many  cases  are  statements  after-the-fact  of  what  exists  on  US 
Navy  ships,  as  opposed  to  a  requirement  on  what  to  provide.  This  specification  will  need  to  be 
reworked  should  a  standard  elevator  controller/sensor  system  be  established. 

It  will  be  necessary  to  delete  options  on  different  technology  levels  i.e.,  microprocessor  based, 
static-logic  based,  etc.  It  may  also  be  necessary  to  develop  a  military  standard  in  this  area.  Adequate 
treatment  in  the  new  specification  must  be  given  to  qualification  testing  of  components  and  the  entire 
system  in  accordance  with  other  military  specifications  and  standards  such  as  those  for  voltage  tran¬ 
sients  and  spikes,  shock,  vibration,  electromagnetic  interference,  humidity,  temperature,  fungus,  etc. 
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Table  16  —  Summary  of  Recommended  Controller  Systems 

OPTION  A  SPECIAL  FEATURES 

*  6PDT  Solid-state  relay  logic  Standard  Electronic  Modules 

*  $A  and  30  A  FET  transistor  based  SPST  solid-state  relay  output  drivers 

*  Solid-state  magnetic  proximity  switches  throughout 

*  Voltages: 

Signal:  15  to  24  VDC  unregulated 
Controller;  12  VDC  regulated 
Output;  12  to  115  VDC  or  VAC 

OPTION  B  SPECIAL  FEATURES 

*  Static-logic  Standard  Electronic  Modules  (NAND  gate,  inverters,  etc.) 

*  10  A  and  25  A  triac  based  solid-state  relay  output  drivers 

*  Solid-state  commercial  eddy-current  proximity  switches  throughout 

*  Voltages: 

Signal:  15  to  24  VDC  unregulated 
Controller;  5  VDC  regulated 
Output:  24  to  115  VaC 

COMMON  FEATURES  APPLICABLE  TO  BOTH  OPTIONS  A  AND  B 

*  The  design  will  be  fail-safe  upon  power  failure  or  unless  there  is  simultaneous  failure  of  two  or  more 

components 

*  Input  and  output  isolation  will  be  provided  for  signals,  commands,  displays,  solenoids  and  contactor  cir¬ 

cuits  to  buffer  electromagnetic  and  electrostatic  interference 

‘Commands  will  be  via  mechanical  push  buttons 

*  Display  lights  will  have  double  lamps  or  be  derated 

*  Two  display  lights  for  levels  both  above  and  below  the  platform  will  be  illuminated  when  the  platform  is 

between  decks— or  other  acceptable  technique  for  locating  the  platform  in  the  trunk  at  all  times 

*  Sensor  and  command  cables  will  be  shielded  twisted  pairs 

*  The  controller  and  sensor  system  will  be  transparent  to  short  duration  transients  caused  by  shock  of  less 

than  20  ms 

*  The  logic  controller  will  be  designed  for  ease  in  trouble  shooting.  Trouble  shooting  aids  will  include 

indicator  on  all  inputs,  logic  functions  and  outputs  at  the  controller.  A  go/no-go  module  tester  will  be 
provided 

*  It  will  be  possible  to  test  all  interlocks  and  safety  devices  individually  at  the  controller  or  in  groups  at 

each  deck  level 

*  Operation  will  allow  dispatch  from  each  level  with  recall  to  the  main  control  level 

*  It  will  be  possible  to  jog  the  platform  in  slow-speed  off  or  to  any  level  to  facilitate  maintenance  and 

access  to  elevator  components 

*  Intrinsically-safe  as  an  alternative  to  explosion-proof  circuits  are  recommended  where  there  are  exten¬ 

sive  hazardous  spaces  entered  by  elevator  electronics 

*  Documentation  for  the  controller  will  be  designed  for  ease  of  trouble  shooting 
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CONCLUSIONS 

The  conclusions  of  this  Navy  shipboard  cargo  and  weapons  elevator  controller  and  sensor  subsys¬ 
tem  problem  analysis  are  given  in  the  summary  of  recommended  controller  systems  Table  16.  There 
are  two  principal  alternatives: 

Alternative  One 

In  Table  16,  option  A  is  for  an  all-solid-state  relay  SEM  controller  with  NRL  solid-state  magnetic 
proximity  switches.  A  controller  to  these  requirements  still  needs  some  developmental  effort  and 
certification  testing  (about  two  years)  before  becoming  operational.  Since  this  is  the  case,  an  acceptable 
short-term  solution  could  be  endorsed  on  those  ships  where  alterations  must  proceed  to  the  elevator 
controller  system.  This  solution  would  be  to  install  miniature-electromechanical  logic  and  solid-state 
output  commercial  component  relay  controllers  of  the  Puget  Sound  Naval  Shipyard  hybrid  relay  type. 
These  controllers  do  not  fully  meet  marine  environmental  or  shock  specifications  but  would  be  accept¬ 
able  as  an  interim  measure,  being  similar  in  logic  type  and  in  most  other  important  aspects  (training, 
maintenance,  etc.)  to  the  concept  of  option  A,  and  considering  the  protected  location  of  the  controller 
space. 

Alternative  Two 

If  it  is  necesssary  to  take  immediate  action  on  a  standard  controller,  then  one  which  requires  no 
new  development  would  be  required  and  the  best  choice,  in  the  opinion  of  the  writer,  would  be  option 
B  of  Table  16.  Option  B  is  for  a  discrete-logic  controller  using  SEM  modules  with  commercial  solid- 
state  eddy-current  proximity  switches.  Of  these  two  alternatives  the  writer  recommends  and  found 
most  support  for  Alternative  One. 
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Appendix  A 

ABBREVIATED  LIST  OF  ORGANIZATIONS,  SHIPS 
AND  PERSONNEL  CONTACTED 


Omanization/Ship 

Personnel 

NAVSEA 

Donald  Morris 

Conrad  Waby 

Andy  Gutow 

Abraham  Sid  Levenson 

NAVSEACENTLANT 

W.  D.  Owenby 

J.  Milton  Oakley 

NAVSEACENTPAC 

Bob  Simkins 

Norfolk  Naval  Shipyard  Design  Division 

Stephen  J.  D'Antoni 

Puget  Sound  Naval  Shipyard  Design  Division 

Wilner  Radke 

Frank  Mapes 

Puget  Sound  Naval  Shipyard  PERA  CV 

Ernie  Perez 

Naval  Weapons  Support  Center,  Crane 

Dean  Winkler 

Roger  Price 

Jim  Wriford 

Dan  Doades 

Naval  Training  Center  Great  Lakes 

Randall  McCarthy 
Charles  Soper 

USS  CANISTEO  (AO-99) 

EM3  Cappiello 

USS  CONSTELLATION  (CVA-64) 

EM 2  J.  R.  Housel 

USS  INDEPENDENCE  (CVA-62) 

EM3  T.  M.  Kirk 

USS  KENNEDY  (CVA-67) 

Ensign  G.  Stuart 

EM3  E.  Barton 

EM 2  Bodani 

USS  NIMITZ  (CV' AN-68) 

LTCDR  Gentile 

LT  R.  E.  Murphy 

EMI  Schimizzi 

AOl  Kimbrell 

USS  SACRAMENTO  (AOE-1) 


EM2  Newell 
EMC  Pappin 
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Organization/Ship  Personnel 

USS  STUMP  (DD-978)  GMG2  Joe  Brooks 


Cutler  Hammer 


Digital  Equipment  Corporation 
ELDEC  Corporation 
Otis  Elevator 
Square  "D"  Company 


U  nidynamics 
US  Elevator 

Westinghouse  Elevator  Company 


John  Slowiak 
P.  M.  Kintner 
P.O.  Gauerke 
D.  J.  Slichter 
W.  H.  Balcken 
J.  W.  Vogel 
D.  L.  Vanzeeland 

Bob  Mebane 

Bill  Maysner 

R.  Drofty 

Richard  A.  Omdahl 
Thomas  E.  Kelm 
Larry  R.  Sunday 
David  N.  Collins 

Mell  Kennedy 

Mark  E.  Millman 
Turgay  Goker 

Frank  McMillan 
Hank  Shey 
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Appendix  B 

KEY  PROVISIONS  OF  MILITARY  SPECIFICATIONS  AND  STANDARDS 


MIL-C-2212E  (Ships)  Controllers,  Electric  Motor,  AC  or  DC  and  Associated  Switching  Devices. 
Naval  Shipboard 

Solid-state  controllers  and  solid-state  limit  switches  are  not  included  in  this  specification.  Shock 
testing  of  controllers  will  be  to  MIL-S-901  Grade  A  Class  1  Type  A.  Momentary  changes  of  state 
under  shock  are  permitted.  Line  contacts  may  open  for  up  to  20  ms  and  close  for  up  to  10  ms.  Auxili¬ 
ary  contacts  may  close  for  up  to  20  ms  or  open  for  up  to  20  ms.  Contactors  and  relays  shall  not  per¬ 
manently  change  their  state  following  the  shock.  During  shock,  overload  relays  shall  not  trip  when  car¬ 
rying  85%  of  tripping  current.  Timing  relays  may  begin  to  recycle  provided  that  the  starter  returns  to 
normal  running  condition  without  operator  intervention. 

Controllers  will  meet  vibration  type  1  tests  of  MIL-STD-167  without  mechanical  damage,  contact 
chatter  or  other  malfunction.  Test  frequencies  are  from  4  to  33  Hz. 

Mechanical  interlocks  shall  be  provided  for  motor  reversing  or  speed  selecting  contactors  if  there 
is  a  possibility  of  short  circuit  resulting  from  simultaneous  contact  closures.  Magnetic  contactors  shall 
have  a  means  for  overload  relay  bypass. 

Endurance  requirements  for  relays  and  contactors  (except  overload)  size  0  through  5  shall  be 
50,000  make  and  break  operations  at  full  voltage  and  power  factor  equals  1  for  100%  break  current  and 
600%  AC/400%  DC  make  current.  There  shall  also  be  50  operations  at  0.4/0. 5  lagging  power  factor 
and  110%  voltage  at  600%  AC/400%  DC  make  and  break  current.  One  million  cycles  endurance  is 
required  for  mechanical  operation  only. 

Electrical  switches  require  50  000  cycles  at  full  voltage  and  current  and  50  cycles  at  full  voltage 
and  150%  current.  When  not  otherwise  specified,  enclosures  for  controllers  shall  be  drip-proof  (45°)  to 
MIL-E-2036. 


M1L-E-164D0G  (Navy)  Electronic.  Interior  Communication,  and  Navigation  Equipment  Naval  Ship 
and  Shore 

Equipment  will  withstand  transient  voltages  equal  to  the  normal  upper  limit  +18%  for  two 
seconds  and  the  lower  normal  limit  -18%  for  two  seconds.  In  addition  to  this,  solid-state  devices  shall 
be  subjected  to  an  input  transient  of  700  V  amplitude  at  two  ms  while  equipment  is  operating.  The 
equipment  shall  function  normally  following  the  transient. 

Transient  frequencies  are  as  follows.  With  the  frequency  set  at  normal  +5%,  there  shall  be  an 
increase  of  3%  for  2  s.  With  the  frequency  set  at  normal  -5%,  there  shall  be  a  decrease  of  3%  for  2  s. 
In  addition  to  the  transients  a  supply  line  voltage  spike  of  2500  V  positive  peak  amplitude  shall  be 
applied  to  spike  wave  shape  defined  as  short  time  transient  in  MIL-STD-1399. 


MIL-E-I7807B  (SH)  Elevator,  Weapon  and  Cargo  Electromechanical  (Shipboard) 

This  specification  states  that  mercury  in  any  form  shall  not  be  used  in  shipboard  equipment.  Test 
reports  shall  contain  a  statement  certifying  that  no  mercury  containing  instruments  have  been  used. 
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Equipment  not  exposed  to  weather  shall  be  for  temperatures  0°C  to  50°C.  Exposed  to  weather 
temperature  requirements  are  —  20°C  to  +65°C. 

Endurance  requirements  are  that  the  elevator  will  not  require  component  parts  during  a  minimum 
life  of  250  000  cycles  at  16  cycles  per  hour  for  10  hours  per  day.  The  cycle  is  a  round  trip  between 
extremes  of  the  elevator.  These  endurance  requirements  do  not  include  preventative  maintenance  such 
as  replacement  of  ropes,  brake  linings,  relays,  etc. 

The  equipment  shall  include  safety  devices  for  broken  or  slack  hoisting  rope,  downward  speed  and 
speed  governor  slack  rope.  The  speed  governor  will  activate  when  the  downward  speed  is  140%  of  the 
rated  speed  or  52.5  m/min  (175  ft/min),  whichever  is  less.  Equipment  shall  operate  on  440  V  3  phase 
60  Hz  3  wire  ungrounded  type  I  power  complying  with  steady  state  and  transient  characteristics  of 
M1L-STD-1399. 

Hoisting  motors  shall  be  squirrel  cage  two  speed  (1800/300  rpm)  induction  440  V  intermittent 
duty  3  with  embedded  integral  thermal  temperature  detectors.  Locked  torque  shall  be  no  less  than 
180%  of  full  speed  full  load  torque. 

Brakes  will  be  continuous  duty  operating  on  110  or  440  VAC.  Brakes  must  stop  the  platform 
within  1  m  (3  ft)  when  platform  is  travelling  downwards  at  rated  speed  and  supporting  150%  of  rated 
load.  The  brakes  must  be  able  to  hold  the  platform  while  supporting  twice  the  rated  load. 

The  control  system  shall  have  a  two  speed  capability  and  also  be  able  to  stop  the  platform  within 
±0.625  cm  (±1/4  in.)  of  selected  level  when  loaded  or  unloaded.  The  controller  shall  operate  from 
440  V  3  phase  60  Hz  or  1 10  V  60  Hz  single  phase.  Protection  and  sensors  are  required  for  low  voltage, 
overload,  and  embedded  motor  temperature.  The  enclosure  will  be  drip-proof. 

Features  will  be  provided  for  emergency  stop,  normal  stop,  emergency  run.  overtravel  bypass, 
slack  rope  bypass,  jog  down,  jog  up,  normal/jog,  power  available  white  light,  red  stop  light  indicator, 
red  motor  over-temperature  light,  red  motor  over-load  light,  and  elapsed  time  meter  MS  1 7324  national 
stock  number  6645-00-952-9069. 

Magnetic  contactors  for  up-down  and  high-low  speed  are  to  be  of  the  same  NEMA  size  and  rating. 
Contacts  are  to  be  electrically  and  mechanically  interlocked  to  prevent  both  of  the  speed  or  both  of  the 
direction  contactors  from  operating  together.  Contactors  for  jogging  are  to  be  derated  as  NEMA  1CS- 
1970  Part  2-32 IB. 

Controller  power  shall  be  from  440/115  VAC  transformer  with  protective  fuses.  The  secondary 
shall  not  be  grounded. 

There  shall  be  a  manual  power  disconnect  switch  type  AQB  M1L-C- 17361  modified  for  NBQ 
operation  and  containing  a  shunt  trip  coil.  The  switch  will  interrupt  power  under  conditions  of  fault 
current.  Any  emergency  stop  switch  will  actuate  the  115  VAC  60  Hz  power  to  the  shunt  trip  coil. 
Power  to  the  shunt  trip  coil  will  come  from  the  control  system  without  interruption  by  additional  fus¬ 
ing. 


Electromechanical  limit  switches  shall  be  115  VAC  single  phase  rating,  explosion-proof  or  water¬ 
tight,  heavy  duty  construction  with  5  cm  (2  in.)  minimum  roller  diameter. 

Proximity  switches  shall  be  water-tight  and  capable  of  withstanding  repeated  immersion  in 
petroleum  based  fluids,  glycol  or  synthetic  or  hydraulic  oils.  Maximum  switching  hysteresis  is  to  be  less 
than  0.25  cm  (0.1  in.).  Maximum  actuating  distance  to  be  not  less  than  1.25  cm  <0.5  in.)  nor  more 
than  5  cm  (2  in.).  Repeatability  shall  be  ±8  mm  (±1/32  in.).  Temperature  limits  are  to  be  0°C  to 
65°C. 
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Electromagnetic  compatibility  requirements  for  proximity  switches  are  to  be  to  MIL-STD-461. 
The  requirements  of  this  standard  are  as  follows: 

Units 

Volts  per  meter 
50 

Average  Peak 

(mW/cm2)  (mW/cm2) 


200  MHz  to  225  MHz 

7 

1  500 

400  MHz  to  450  MHz 

5 

300 

850  MHz  to  940  MHz 

12 

400 

1.215  GHz  to  1.365  GHz 

3 

3  900 

2.7  GHz  to  3.7  GHz 

78 

32  000 

5.4  GHz  to  5.9  GHz 

2 

1  400 

16.3  GHz  to  33  GHz 

1 

1  000 

Each  proximity  switch  is  to  be  provided  with  a  6m  (20  ft)  integral  cable.  Limit  switches  shall  be 
provided  for  up  and  down  overtravel  and  also  on  hatch  covers  to  prevent  running  into  the  covers. 

A  normal  stop  switch  shall  be  provided  unless  access  to  the  platform  is  through  an  interlocked 
door.  When  the  normal  stop  switch  is  in  stop  position  it  shall  not  be  possible  to  initiate  or  continue 
platform  motion 

Interlocks  shall  be  provided  for  each  door  to  prevent  it  from  being  opened  when  the  platform  is 
not  at  that  level.  Interlocks  shall  also  prevent  elevator  travel  unless  the  door  is  fully  closed.  W  hen  two 
doors  are  at  one  level,  each  door  shall  be  separately  interlocked  so  that  only  one  door  can  be  opened  at 
one  time.  Automatic  controllers  are  considered  control  2.  Control  2  elevators  shall  be  operated  in  one 
of  the  following  modes: 

a.  the  operator  at  each  level  shall  select  the  level  to  which  the  platform  will  be  sent 

b.  the  operator  of  the  master  control  station  shall  select  by  use  of  an  electroswitch  or  switches 
the  two  levels  between  which  the  platform  will  operate.  Push-button  switches  at  each  level 
served  shall  men  be  used  to  send  the  platform  up  or  down. 

Master  control  stations  shall  have  an  emergency  stop  switch,  normal  stop  switch,  push-button 
switches  for  levels,  platform  position  indicator  lights,  door  open/close  switch,  and  power-on  indicator 
light.  Other  control  stations  shall  have  an  emergency  stop  switch,  normal  stop  switch,  push-button 
switches  for  dispatching  to  other  levels,  car-here  indicator  light,  door  open/close  switch. 

Lights  in  the  elevator  machinery  space  shall  indicate  the  level  of  the  platform. 

Electromechanical  relay  logic  (method  A  controls)  shall  use  MIL-C-2212  or  MIL-R-19523 
category  A  or  B  Class  I  relays. 

Programmable  controllers  (method  B  controls)  will  have  no  mercury  wetted  contacts. 

For  programmable  controllers  elevator  position  shall  be  monitored  by  a  shaft  angle  encoder. 

For  static  logic  (method  C  controls)  the  DC  power  source  for  the  internal  logic  shall  be  separated 
and  isolated  from  other  power  sources  and  not  used  for  any  external  function.  All  external  circuits 
shall  operate  at  20  VDC  or  AC  minimum.  The  controller  shall  be  provided  with  a  manual  monitoring 
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system  that  would  allow  examination  of  the  state  of  each  input  and  output  and  each  control  element.  A 
tester  will  be  provided  capable  of  testing  all  circuits  on  the  boards  on  a  go/ no-go  basis. 

MIL-H-46855A  Human  Engineering  Requirements  for  Military  Systems,  Equipment  and  Facilities 

A  human  engineering  effort  shall  be  provided  to  improve  the  man-machine  interface  and  to 
achieve  required  effectiveness  of  personnel  performance  during  system  operation,  maintenance,  con¬ 
trol,  and  to  make  economical  demands  upon  manpower  resources,  skills,  training  and  costs. 

Human  engineering  principles  should  be  applied  to  identify  and  select  the  equipment  to  be 
operated,  maintained  and  controlled  by  man.  The  analysis  should  assure  that  human  performance 
requirements  do  not  exceed  human  capabilities. 

Role  models  should  be  identified  and  trade-off  studies  made  to  determine  which  system  functions 
should  be  machine  implemented  and  which  should  be  reserved  for  human  operator  or  maintainer. 

These  analyses  shall  also  be  used  as  the  basis  for  developing  manning  levels  and  skill/training  require¬ 
ments. 

V1IL-R-19523A  (Ships)  Relays,  Control,  Naval  Shipboard 

Endurance  requirements  are: 

Category  A  500  000  operations 
Category  B  100  000  operations 
Category  C  25  000  operations 

Relays  shall  pick  up  at  not  more  than  80%  of  rated  voltage  and  operate  in  the  range  of  80%  to 
1 10%  of  voltage  at  operating  temperature.  Relays  shall  drop  out  at  not  less  than  10%  of  rated  voltage. 

There  are  two  operating  temperatures,  50°C  and  65  °C.  Those  built  for  50°C  will  operate  from 
5°C  to  50°C.  Those  built  for  65°C  will  operate  to  85°C  fot  one  hour  without  damage.  For  this  'ern- 
perature  test  the  relays  will  be  energized  but  need  not  operate. 

Relays  will  be  shock  tested  to  MIL-S-901.  Relays  shall  be  Grade  A  sub  assemblies  Class  1  solidly 
mounted.  Relays  are  classified  under  this  specification  as  follows: 

Class  l.  Those  relays  whose  contacts  will  not  chatter  in  either  the  ener¬ 

gized  or  de-energized  position. 

Class  II.  Those  relays  whose  contacts  will  not  chatter  long  enough  to 

either  drop  out  the  relay  or  drop  out  a  standard  relay  having  a 
drop  out  time  of  4  ms.  Contacts  will  not  close  from  the  open 
position. 

Class  III.  Those  relays  whose  contacts  will  not  chatter  long  enough  to 

drop  out  a  standard  relay  having  a  drop  out  time  of  4  ms.  Con¬ 
tacts  shall  not  close  from  the  open  position  due  to  shock. 

Class  IV.  Those  relays  whose  contacts  will  not  chatter  long  enough  to 

either  drop  out  the  relay  or  drop  out  a  standard  relay  having  a 
drop  out  time  of  20  ms.  Contacts  shall  not  close  from  the  open 
position  due  to  shock. 

Class  V.  Those  relays  whose  contacts  will  not  chatter  long  enough  to 

drop  out  a  standard  relay  having  a  drop  out  time  of  20  ms. 

Contacts  shall  not  close  from  the  open  position  due  to  shock. 
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Class  VI. 
Class  V'U. 


Those  relays  whose  contacts  will  not  close  -.om  the  open  posi¬ 
tion  due  to  shock. 

No  requirements  for  electrical  operation. 


Under  vibration  specification  M1L-STD-167,  relays  must  perform  without  mechanical  damage, 
contact  chatter  or  other  maloperation. 

MI1-S-901C  (Navy)  Shock  Tests  (hi-impact)  Shipboard  Machinery,  Equipment  and  Systems  — 
Requirements  for 


Grade  Categories: 

Grade  A.  Machinery,  equipment  and  systems  essential  for  the  safety  and 

continued  combat  capabilty  of  the  ship.  Design  shall  withstand 
shock  loadings  without  significant  effect  on  performance  and 
without  equipment  coming  adrift  or  otherwise  creating  a  hazard. 

Grade  B.  Machinery,  equipment  and  systems  not  required  for  safety  or 

continued  combat  capability  of  the  ship.  Design  should  be  suit¬ 
able  to  withstand  shock  loadings  without  equipment  coming 
adrift  or  otherwise  creating  a  hazard. 

Class  Categories: 

1.  Equipment  is  to  withstand  high  shock  without  external  or  internal  resilient  mounts. 

-  2.  Equipment  must  withstand  high  shock  with  the  use  of  resilient  mounts. 

3.  Equipment  may  be  used  with  or  without  mounts  and  therefore  must  meet  both  Class  1  and 

Class  2  requirements. 

Test  Classifications: 

Lightweight  category  equipment  weighing  112.5  kg  (250  lb)  or  less 

Medium  weight  category  equipment  between  112.5  kg  (250  lb)  and  2700  kg  (6,000  lb) 

Heavy  weight  category  equipment  between  2700  kg  (6,000  lb)  and  13500  kg  (30,000  lb) 

Type  Classifications: 

A.  Test  of  a  principle  unit. 

B.  Test  of  a  subsidiary  component  and  shall  be  performed  for  those  cases  where  a  testing  machine 
or  facility  of  sufficient  capacity  is  not  available. 

C.  Test  of  a  subassembly  having  a  variety  of  shipboard  applications. 

Unless  otherwise  specified.  Grade  A  equipment  will  be  assumed.  Where  performance  during  the 
shock  test  is  not  specified,  the  requirements  for  Grade  A  items  following  the  test  shall  be  the  same  as 
those  prior  to  the  test. 
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Lightweight  equipment  up  to  180  kg  (400  lbs)  including  mounting  may  be  tested  on  a  lightweight 
testing  machine.  This  machine  has  a  180-kg  (400-lbs)  hammer  weight.  One  drop  is  made  at  30  cm  (1 
ft),  a  second  at  l  m  (3  ft),  and  a  third  at  1.5  m  (5  ft)  for  a  total  of  three  blows  parallel  to  each  of  three 
principal  axes  of  the  apparatus  for  a  grand  total  of  nine  blows.  Where  equipment  has  two  states  (for 
example,  circuit  breakers)  the  nine  blows  shall  be  delivered  for  each  condition. 

MIL-STD-I67-1  (Ships)  Mechanical  Vibrations  of  Shipboard  Equipment 

Type  Classifications: 

1.  Environmental 

2.  Internally  Excited 

Electronic  equipment  is  Type  1. 

Acceptability  under  environmental  vibration  means  the  ability  of  the  equipment  to  perform  its 
function  during  and  after  the  tests  specified.  Minor  damage  or  distortion  will  be  permitted  provided  the 
function  is  not  impaired.  Nonrepetative  failures  of  vacuum  tubes,  condensers,  wiring,  etc.,  which  can 
easily  be  replaced,  are  generally  considered  minor  failures.  In  these  cases  the  repair  is  made  and  the 
tests  continued  with  no  penalty. 

Equipment  is  tested  along  each  of  the  three  rectilinear  axes.  Equipment  shall  be  vibrated  for  five 
minutes  at  intervals  of  1  Hz  according  to  the  following  schedule: 


Hz 

cm  (in.) 

Amplitude 

4 

to 

15 

0.075  ±0.015 

(0.03  ±  0.006) 

16 

to 

25 

0.05  ±  0.01 

(0.02  ±  0.004) 

26 

to 

33 

0.025  ±  0.005 

(0.01  ±  0.002) 

34 

to 

40 

0.0125  ±  0.0025 

(0.005  ±  0.001) 

41 

to 

50 

0.0075  +  0-0.0025 

(0.003  +  0-0.001) 

The  equipment  shall  be  vibrated  for  an  endurance  test  of  at  least  2  h  at  resonant  frequencies.  If 
no  resonant  frequencies  are  found  this  test  is  performed  at  the  highest  frequency  used  in  the  test. 
Equipment  which  incorporates  resilient  mounts  integrally  in  the  equipment,  such  as  electronic  cabinets, 
shall  be  installed  as  supplied. 


Appendix  C 

EXTRACT  FROM  MIL-HDBK-217C 

MILITARY  STANDARDIZATION  HANDBOOK  RELIABILITY  PREDICTION 
OF  ELECTRONIC  EQUIPMENT 

Two  methods  of  reliability  prediction  are  described  in  this  Handbook: 

1 .  Part-stress  analysis 

2.  Parts-count  method. 

The  parts-count  method  requires  less  information  and  is  more  applicable  to  elevator  controllers  in 
the  early  design  phase.  The  following  pages  are  extracted  from  M1L-HDBK-217  on  the  subject  of 
parts-count  reliability  prediction. 

3.0  PARTS  COUNT  RELIABILITY  PREDICTION 

This  prediction  method  is  applicable  during  bid  proposal  and  early  design  phases.  The  information 
needed  to  apply  the  method  is  (1)  generic  part  types  (including  complexity  for  microelectronics)  and 
quantities,  (2)  part  quality  levels,  and  (3)  equipment  environment.  The  general  expression  for  equip¬ 
ment  failure  rate  with  this  method  is: 

^  EQUIP 

<-l 

for  a  given  equipment  environment  where: 

^ equip  =  total  equipment  failure  rate  (failures/ 106  hr.) 

\G  *»  generic  failure  rate  for  the  i  th  generic  part  (failures/ 

106  hr.) 

n-y  »  quality  factor  for  the  i  th  generic  part, 

.V,  =■  quantity  of  i  th  generic  part. 

n  *■  number  of  different  generic  part  categories. 

The  above  expression  (1)  applies  if  the  entire  equipment  is  being  used  in  one  environment.  If 
the  equipment  comprises  several  units  operating  in  different  environments  (such  as  avionics  with  units 
in  airborne  inhabited  (A,)  and  uninhabited  IAL  )  environments),  then  Eq.  (1)  should  be  applied  to  the 
portions  of  the  equipment  in  each  environment.  These  "environment-equipment"  failure  rates  should 
be  added  to  determine  total  equipment  failure  rate.  Environmental  symbols  are  as  defined  in  Table  2-3. 
page  2-4. 

The  quality  factors  to  be  used  with  each  part  type  are  shown  with  the  applicable  kG  tables  and  are 
not  necessarily  the  same  values  that  are  used  in  Sect.  2.0.  Part  Stress  Analysis.  Multi-quality  levels  are 
presented  for  microelectronics,  discrete  semiconductors,  and  for  established  reliability  (ER)  resistors 
and  capacitors.  The  \G  values  for  the  remaining  parts  apply  providing  that  the  parts  are  procurred  in 
accordance  with  the  applicable  parts  specifications  and,  for  these  parts,  ttq  «  1.  Microelectronic  devices 
have  an  additional  multiplying  factor,  nL  (learning  factor)  as  defined  in  Table  3-4. 

It  should  be  noted  that  no  generic  failure  rates  are  shown  for  hybrid  microcircuits.  Each  hybrid  is 
a  fairly  unique  device.  Since  none  of  these  devices  have  been  standardized,  their  complexity  cannot  be 
determined  from  their  name  or  function.  Identically  or  similarly  named  hybrids  can  have  a  wide  range 
of  complexity  that  thwarts  categorization  for  purposes  of  this  prediction  method.  If  hybrids  are  antici¬ 
pated  for  a  design,  their  use  and  construction  should  be  thoroughly  investigated  on  an  individual  basis 
with  application  of  the  prediction  model  in  Sec.  2.1.7. 
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Table  3-1  —  Generic  Failure  Rate,  K0,  for  Bipolar  Digital  Devices  (TTL  &  DTL) 

vs.  Environment  (/./ 106  hr.)* 


Circuit  Complexity 

gb&sf 

gf 

ait 

aif 

NS 

aut 

auf 

NU 

ml 

1-20  gates 

wm 

mm 

.13 

.093 

.091 

HI 

21-50  gates 

mSm 

■S 

mum 

.21 

.17 

.16 

51-100  gates 

1 

.094 

■9 

.29 

.24 

.23 

.47 

101-500  gates 

.079 

.22 

.37 

.56 

.49 

.45 

.61 

.89 

.71 

.85 

501-1000  gates 

.13 

.34 

.56 

.82 

.73 

.67 

.92 

1.3 

1.1 

1.2 

1001-2000  gates 

.29 

.78 

1.3 

1.8 

1.7 

1.5 

2.1 

2.9 

2.5 

2.7 

.81 

2.1 

3.5 

5.1 

4.5 

4.1 

5.8 

8  1 

6.7 

7.3 

2.2 

5.7 

9.6 

14. 

12. 

11. 

16. 

22. 

18. 

20. 

5.9 

16. 

26. 

38. 

33. 

30. 

43. 

49. 

54. 

ROM**  <  320  bits 

■ 

mm 

.036 

mm 

.048 

.043 

.060 

.085 

.070 

.078 

ROM  321-576  bits 

mm 

.055 

.066 

.091 

.13 

11 

.12 

ROM  577-1120  bits 

1 

.052 

.087 

.13 

.11 

.10 

.14 

.20 

.17 

.19 

ROM  1121-2240  bits 

.029 

.078 

.13 

.20 

.17 

.16 

.22 

.31 

.25 

.29 

ROM  2241-5000  bits 

.12 

.20 

.30 

.27 

.24 

.33 

.48 

.39 

.45 

ROM  5001-11000  bits 

.18 

.31 

.47 

.41 

.38 

.51 

.75 

.60 

.70 

11001-17000  bits 

.28 

.48 

.73 

.63 

.58 

.79 

1.1 

92 

1.1 

'See  Tables  3-3  and  3-4  for  II  y  and  11^  values. 
"RAM  failure  rate  —  3.5  *  ROM  failure  rates. 
Ns  «■  Naval  Sheltered  Environment 
Nu  —  Naval  Unsheltered  Environment 


Table  3-2  —  Generic  Failure  Rate,  \G,  vs.  Environment  for  Bipolar  Beam  Lead,  ECL, 
All  Linear,  and  All  MOS  Devices  (f./106  hr.)* 


Circuit  Complexity 

GB&SF 

gf 

A1T 

aif 

NS 

gm 

aut 

auf 

NU 

ml 

1-20  gates 

.16 

.14 

.12 

21 

.30 

.25 

24 

21-50  gates 

.19 

.31 

.43 

.34 

.73 

.86 

.92 

.52 

51-100  gates 

.31 

.48 

.59 

.68 

.54 

1.2 

1.3 

1.5 

.78 

101-500  gates 

.19 

.82 

1.2 

1.4 

1.7 

1.3 

3.1 

3.4 

3.9 

1.7 

501-1000  gates 

.32 

1.4 

2.0 

2.3 

2.8 

2.1 

5.1 

5.5 

6.4 

2.6 

1001-2000  gates 

.74 

3.1 

4.6 

5.2 

6.4 

4.8 

12. 

13. 

15. 

6.0 

2001-3000  gates 

2.0 

8.4 

13. 

14. 

17. 

13. 

33. 

35. 

41. 

16. 

3001-4000  gates 

5.4 

23. 

35. 

39. 

47. 

36. 

90. 

96. 

Ill 

44, 

4001-5000  gates 

15. 

62. 

94. 

105. 

128. 

97. 

241. 

258. 

299 

121 

ROM**,  320  bits 

.021 

.087 

.13 

.15 

.18 

.14 

.33 

.36 

.42 

.17 

ROM**  321-576  bits 

.031 

.13 

.19 

.22 

.27 

.20 

.49 

.53 

.62 

.26 

ROM**  577-1120  bits 

.048 

.20 

.31 

.35 

.42 

.32 

.78 

.84 

.98 

->1 

ROM**  1121-2240  bits 

.072 

.30 

.45 

.52 

.63 

48 

i  .2 

1.3 

1.5 

.61 

ROM**  2241-5000  bits 

11 

.46 

.70 

.80 

.96 

.74 

1.8 

1.9 

T  *) 

.94 

ROM**  5001-11000  bits 

.17 

.70 

1.1 

1.2 

1.5 

1.1 

2.7 

2.9 

3.4 

1.5 

ROM**  11001-17000  bits 

.25 

1.1 

1.6 

1.9 

2.2 

1.7 

4.1 

4.5 

5.2 

2.2 

Linear,  ^  32 
transistors 

Oil 

.052 

.12 

.20 

.16 

.15 

.22 

.35 

.27 

.33 

Linear,  33-100 
transistors 

.023 

.11 

.24 

.41 

.35 

.31 

.48 

.73 

.60 

.66 
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Table  3-3  —  rr0,  Quality  Factors 
for  Use  with  Tables  3-1  &  3-2* 


Quality  Level 

nQ 

S 

0.5 

B 

1 

B-l 

2.5 

B-2 

5 

C 

8 

C-l 

45 

D 

75 

D-l 

150 

•See  Table  2. 1.5-1  for  descriptions  of 
quality  levels,  it  q  values  shown  here  are 
different  from  those  in  Table  2.1  5-1. 


Table  3-4  —  rt  L,  Learning  Factors  for  Use  with  Tables  3-1  &  3-2 
The  learning  factor  rr  L  is  10  under  any  of  the  following  conditions: 

(1)  New  device  in  initial  production. 

(2)  Where  major  changes  in  design  or  process  have  occurred. 

(3)  Where  there  has  been  an  extended  interruption  in  production  or  a 
change  in  the  line  personnel  (radical  expansion). 

The  factor  of  10  can  be  expected  to  apply  until  conditions  and  controls 
have  stabilized.  This  period  can  extend  for  as  much  as  six  months  of 
continuous  production. 

tt L  is  equal  to  1.0  under  all  production  conditions  not  stated  in  (1),  (2) 
and  (3)  above. 
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Table  3-5  —  Generic  Failure  Rate,  Ac,  (f./106  hr.)  for  Discrete  Semiconductors 
vs.  Environment  (See  Table  3-6  for  Quality  Factor) 


Part  Type 

Gg&Sp 

°F 

ait 

aif 

NS 

gm 

aut 

auf 

NU 

ml 

Transistors 

mm 

Si  NPN 

.28 

.59 

.26 

.59 

.60 

1.2 

.84 

.96 

Si  PNP 

ESI 

.46 

.96 

.41 

.96 

.96 

1.9 

1.4 

1.5 

Ge  PNP 

.25 

■89 

.84 

jEj 

2.5 

Ge  NPN 

WSm 

.66 

EH 

2.2 

EH 

6.6 

FET 

EB 

mm 

.78 

1.6 

HI 

mm 

2.3 

2.6 

Unijunction 

EBB 

H 

mm 

5.6 

51 

EH 

9.0 

9.0 

Diodes 

Si,  Gen.  Purpose 

.036 

.098 

.24 

.48 

.33 

.33 

Ge.  Gen  Purpose 

.078 

.25 

.51 

.51 

.44 

.87* 

.75* 

.81 

Zener  &  Avalanche 

mm 

.24 

.51 

.22 

.51 

.54 

1.1 

.72 

.84 

Thyristor 

■SB 

sa 

.43 

.90 

.40 

.90 

1.0 

2.0 

1.4 

1.4 

Si  Microwave  Det. 

.19 

2.2 

6.0 

12. 

3.9 

12. 

7.5 

25. 

17. 

46. 

Ge  Microwave  Det. 

.41 

5.6* 

18.* 

35.* 

** 

35.* 

** 

** 

+  + 

** 

Si  Microwave  Mix. 

.25 

3.0 

8.0 

16. 

5.1 

16. 

17. 

34. 

23. 

64. 

Ge  Microwave  Mix. 

.72 

10.* 

31.* 

61.* 

** 

61.* 

** 

** 

** 

** 

Varactor,  Step 

.24 

1.5 

3.9 

8.1 

3.5 

8.1 

8.6 

17. 

12. 

13. 

Recovery,  Tunnel 

LED 

.034 

.14 

.25 

.49 

.45 

.35 

.91 

1.8 

1.4 

.88 

Single  Isolator 

.051 

.21 

.38 

.74 

.68 

.53 

1.4 

2.7 

2.1 

1.30 

'This  value  is  valid  only  for  electrical  stress.  S  $  0.3,  as  defined  in  Sec.  2.2. 

"Do  not  use  in  these  environments  since  temperature  normally  encountered  combined  with  normal  power  dissipation 
are  above  the  device  ratings. 
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Table  3-6  —  irQ,  Quality  Factors  for  Table  3-5 


Part  Type 

JANTXV 

JANTX 

JAN 

Non-Mil  Hermetic 

Plastic 

Microwave  Diodes 

0.3 

0.6 

1.0 

2.0 

— 

All  Other  Types 

1  o.i 

0.2 

1.0 

5.0 

10. 

Table  3-7  —  Generic  Failure  Rate,  \G,  (f./106  hr.)  For  Resistors 
(see  Table  3-9  for  quality  factor) 


Resistors 

Fixed 

Use  Environment 

Mil-R- 

gb& 

°F 

ait 

A,p 

NS 

aUT 

AUF 

Nu 

ml 

Construction 

Style 

Spec 

SF 

Composition 

RCR 

39008 

.00051 

0032 

.0037 

.0075 

.0046 

.0066 

014 

.027 

021 

02 

Composition 

RC 

11 

0025 

.016 

018 

.038 

.023 

.033 

069 

13 

10 

099 

Film 

RLR 

39017 

.0012 

.0031 

.0043 

.0088 

.0033 

0062 

.016 

032 

.021 

i28] 

Film 

RL 

22684 

.0061 

.015 

022 

.044 

.017 

.031 

079 

016 

10 

U 

1  Film 

RN 

55182 

.0014 

.0033 

0049 

.0! 

.0037 

007 

018 

036 

.024 

.032 

j  Film 

RN 

10509 

.0073 

.017 

025 

.05 

019 

.035 

09 

.18 

12 

.16 

i  Film,  Power 

RD 

11804 

.012 

.026 

.055 

.11 

.026 

.078 

.15 

.29 

19 

46 

Film,  Network 

R2 

83401 

.026 

.072 

.17 

.34 

.14 

.24 

80 

1.6 

1.2 

I.i  | 

Wirewound. 

RBR 

39005 

.0085 

019 

058 

.12 

.020 

.078 

22 

44 

.17 

39 

Accurate 

RB 

93 

.043 

094 

29 

.58 

.10 

39 

i.i 

2.2 

85 

1.9 

Wirewound, 

RWR 

39007 

014 

.044 

073 

.15 

.037 

091 

19 

37 

25 

.54 

Power 

RW 

26 

.072 

22 

36 

73 

.19 

45 

94 

1.9 

1.3 

2,7  i 

Wirewound, 

RER 

39009 

.0079 

021 

.045 

090 

.024 

056 

11 

>2 

16 

34 

Ch.  Mount 

RE 

18546 

040 

010 

22 

.45 

.12 

.28 

.56 

i.i 

79 

17 

1  Resistors,  Variable 

_ . _ 1 

Wirewound. 

RTR 

39015 

.014 

034 

078 

.16 

.077 

15 

19 

37 

.24 

1.1  ! 

Trimmer 

RT 

27208 

.072 

.17 

.39 

79 

.39 

.74 

.93 

1.9 

1.2 

5.5  1 

W  W  ,  Prec. 

RR 

12934 

.84 

2.1 

5.5 

11. 

4.6 

11 

14. 

29. 

18. 

132. 

W.W..  Semi- 

RA 

19 

.31 

.84 

2.4 

4.8 

2.1 

9.5 

• 

* 

• 

*  j 

Prec. 

RK 

39002 

.31 

.84 

2.4 

48 

2.1 

9.5 

• 

• 

* 

*  ! 

W  W„  Power 

RP 

22 

.31 

.78 

2.0 

3.9 

1.7 

7.8 

• 

* 

• 

•  1 

| 

Non-W  W. 

RJR 

39035 

.02 

.067 

12 

.23 

.95 

.23 

.27 

54 

34 

1.8  i 

Trimmer 

RJ 

22097 

10 

33 

58 

1.2 

4  8 

1.2 

1.4 

2.7 

1.7 

92 

Composition 

RV 

94 

.12 

49 

I.I 

2.1 

.88 

4  1 

6  0 

13 

6.8 

18  ; 

,  Non-W.W.  Prec 

RQ 

39023 

086 

35 

65 

1  3 

.58 

1.3 

2.8 

5.7 

2.6 

10 

j  Film 

RVC 

23285 

096 

.34 

6 

1.2 

.51 

12 

2.2 

4.4 

2.0 

9.6  1 

*  -  not  normally  used  in  ihese  environments 
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Table  3-8  —  Generic  Failure  Rate,  a6-,  (f/ 10*  hr)  for  Capacitors 
(See  Table  3-9  for  quality  factors) 


Capacitors,  Fixed 

Use  Environment 

Dielectric 

Style  Mil-C- 
Spec. 

Gb  &SF 

Gf 

Air 

Air 

fifl 

G„ 

-4  IT 

Aif 

■V't 

Ml 

Paper 

CP 

25 

.0117 

.057 

.ii 

.047 

.057 

.16 

.31 

.15 

.29 

Paper 

CA 

12889 

012 

.087 

.17 

.083 

.087 

.47 

.90 

.53 

.44 

Paper/ Plastic 

CZR 

11693 

.0047 

.0098 

.025 

.05 

.021 

MSI 

.14 

.13 

Paper/ Plastic 

CPV 

14157 

.0021 

.0042 

.0088 

.018 

.0088 

sEU 

.05 

.044 

Paper/  Plastic 

CQR 

19978 

.0021 

.0042 

.0088 

.018 

.0088 

.0088 

IBfiM 

Paper/ Plastic 

CHR 

39022 

.0028 

.006 

.012 

.024 

.012 

.012 

Paper/ Plastic 

CH 

18312 

.02 

.042 

.084 

.17 

.087 

.24 

.49 

.22 

.42 

55514 

.0041 

K9I 

.043 

.018 

.03 

.067 

mm 

TffH 

.13 

83421 

.0023 

B 

.010 

.0096 

.028 

mw 

.048 

MICA 

CMR  39001 

ESS 

.0043 

.0084 

.044 

.088 

MICA 

CM 

5 

003 

ifa 

HiKiX™ 

.071 

.026 

.050 

.27 

.53 

.25 

.25 

MICA 

CB 

10950 

09 

.19 

.42 

.85 

.3 

.60 

1.9 

3.8 

1.4 

Glass 

CYR 

23269 

.0003 

.0037 

.0075 

.0066 

.027 

054 

gJfiWJ 

.026 

Glass 

CY 

11272 

001 

.011 

.022 

.020 

082 

.16 

.079 

Ceramic 

CKR 

39014 

.0036 

.033 

.0098 

.016 

.14 

.032 

.12 

Ceramic 

CK 

11015 

Oil 

.099 

.029 

.41 

.35 

Ceramic 

CCR 

20 

.0008 

.0058 

.011 

.12 

.070 

.057 

TA.  Sol. 

CSR 

39003 

.012 

.078 

.16 

.035 

.052 

.15 

.29 

.14 

.26 

TA,  Non-Sol.  CLR 

39006 

.0061 

.082 

.16 

.049 

.069 

.14 

.28 

.15 

.23 

CL 

3965 

.018 

.24 

.49 

.15 

.21 

.42 

.83 

.46 

.69 

Al  Oxide 

CU 

39018 

.23 

1.2 

2.3 

.96 

1.6 

4.8 

9.7 

5.3 

5.5 

AL  Dry 

CE 

62 

.36 

1.9 

3.7 

1.7 

2.6 

21. 

12. 

8.7 

Capacitors,  Variable 

_ 

Ceramic 

cv 

81 

.32 

1.6 

2.5 

4.8 

4.2 

3.5 

24. 

48. 

19. 

31. 

Piston 

PC 

14409 

.099 

.54 

1.2 

2.3 

1.7 

1.5 

9.2 

18. 

22. 

T5 

Air,  Trimmer  CT 

92 

.4 

3.0 

4.8 

9.4 

8. 

6.8 

49. 

98. 

37. 

60. 

Vacuum 

CG 

23183 

1.2 

6.2 

15. 

29. 

15. 

21. 

140. 

270. 

94. 

* 

•Not  normally  used  in  this  environment 


Table  3-9— irQ  Factor  for 
Resistors  and  Capacitors 


Failure  Rate  Level 

no 

L 

1.5 

M 

1.0 

P 

.3 

R 

.1 

S 

.03 

•For  Non-ER  parts  (Styles  with 
only  2  letters  in  Tables  3-7  <fc  3-8). 
iTg  ■»  I  providing  parts  are  pro¬ 
cured  in  accordance  with  the  part 
specification;  if  procured  as  com¬ 
mercial  (NON-MIL)  quality,  use 
ire  —  3.  For  ER  parts  (Styles 
with  3  letters),  use  the  trB  value 
for  the  "letter"  failure  rate  level 
procured. 


125 


1 

I 


G  O.  THOMAS 


Table  3-10  —  Generic  Failure  Rate,  (f/106  hr)  for  Inductive  Electromechanical 
and  Miscellaneous  Parts  (See  Table  3-11  forwy) 


Part  Type 


Use  Environment 


Inductive 

Gg  Sl  Sf 

Gf 

■■*17 

A  IF 

Ns 

Gw 

A  IT 

^LF 

Nl 

Ml 

Low  power  pulse 

.003 

.0048 

.041 

.082 

.017 

.047 

.069 

.14 

.065 

.12 

transformer 

Audio  transformer 

.006 

.0096 

.082 

.16 

.034 

.094 

.14 

.28 

.13 

.24 

High  power  pulse  A 

019 

.053 

.31 

.60 

.13 

.35 

46 

.92 

.98 

.86 

power  transformer 
filter. 

R.F.  transformer 

.024 

.038 

.33 

.64 

.14 

.38 

.56 

1.1 

.52 

96 

R.F.  coils,  fixed 

.0016 

.004 

.021 

.042 

.0096 

.048 

.039 

.078 

.038 

}  2 

R.F.  coils,  variable 

.0032 

.008 

.042 

.084 

.019 

.096 

.078 

.16 

.077 

.24 

Motors 

• 

15. 

19. 

19. 

24. 

19. 

41. 

41. 

49. 

* 

Relays 

General  purpose 

.13 

.30 

.65 

13 

.89 

.81 

2.8 

5.6 

2.9 

16. 

Contactor,  high 

.44 

1.0 

2.2 

4.5 

3.0 

2.8 

9.6 

19. 

10. 

56 

current 

Latching 

.10 

.24 

.52 

1.0 

.71 

.65 

2.2 

4.5 

2.3 

13 

Reed 

.11 

.26 

.55 

1.1 

.75 

.69 

2.4 

4.8 

2.5 

14. 

Thermal  bi-metal 

.29 

.69 

1.5 

3.0 

2.0 

1.9 

6.4 

13. 

6.7 

37. 

Meter  movement 

.90 

2.1 

4.6 

9.2 

6.3 

5.8 

20. 

40. 

21 

* 

Switches 

Toggle  &  push 

.035 

.011 

.13 

.35 

.15 

.61 

1.8 

3.5 

.84 

24 

button 

Sensitive 

.15 

.44 

.74 

1.5 

.59 

2.5 

7.4 

15. 

3  4 

100. 

Rotary 

.22 

.67 

1.1 

2.2 

.89 

oo 

rn 

11 

22. 

5.1 

150. 

Connectors  (Per 

Pair! 

Circular,  Rack  & 

.0062 

.029 

.12 

.24 

.053 

.12 

.17 

.34 

.23 

18 

Panel 

Printed  wiring 

.0031 

.028 

.060 

.12 

036 

.060 

.090 

.18 

.11 

.090 

board 

Coaxial 

.0084 

.032 

.13 

.26 

060 

10 

IS 

36 

.24 

.20 

Two-side  PC  board 

.0012 

.0024 

.005 

01 

.0048 

0048 

.012 

024 

012 

024 

Multi-layer  PC  board 

.15 

.30 

.63 

1.3 

.60 

60 

1.5 

3.0 

1.5 

3.0 

Connections 

Tubes 

Lasers 


See  Section  2.13 
See  Section  2.3 
See  Section  2.4 


•Not  normally  used  in  these  environments. 


Table  3-11  —  rr q  Factor  for  Use  with  Table  3-10 


Part  Type 

Quality  Level 

Mil-Spec  Non-Mil 

Inductive 

1  3 

Motors 

1  1 

Relays 

1  3 

Switches,  toggle  &  sensitive 

l  20 

Switches,  rotary 

1  50 

Connectors 

l  3 

P.W.  Boards 

l  — 

Others 

1 
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2.1.5  FIGURES  AND  TABLES  FOR  THE  MONOLITHIC  MODEL  PARAMETERS 

This  section  presents  the  tables  and  figures  for  quantifying  the  parameters  of  the  failure  rate 
models  in  Sec.  2.1.1  through  2.1.4  for  the  various  monolithic  microelectronic  device  types.  The  tables 
are  presented  first,  and  then  the  figures. 


Table  2. 1.5-1.  —  Quality  Factors 


Quality  Level 

Description 

■3§l 

S 

Procured  in  full  accordance  with  MIL-M-38510, 

Class  S  requirements. 

i 

| 

B 

Procured  in  full  accordance  with  MIL-M-38510. 

Class  B  requirements. 

■) 

B-l 

Procured  to  screening  requirements  of  MIL-STD- 
883,  Method  5004,  Class  B,  and  in  accordance 
with  the  electrical  requirements  of  MIL-M- 
38510  slash  sheet  or  vendor  or  contractor 
electrical  parameters.  The  device  must  be 
qualified  to  requirements  of  MIL-STD-883, 

Method  5005.  Class  B.  No  waivers  are  allowed. 

> 

B-2 

Procured  to  vendor's  equivalent  of  screening 
requirements  of  MIL-STD-883.  Method  5004. 

Class  B.  and  in  accordance  with  vendor's 
electrical  parameters.  Vendor  waives  certain 
requirements  of  MIL-STD-883.  Method  5004.  Class  B. 

10 

i 

i 

C 

Procured  in  full  accordance  with  MIL-M-38510. 

Class  C  requirements. 

16 

C-l 

i 

Procured  to  screening  requirements  of  MIL-STD- 
883.  Method  5004.  Class  C  and  in  accordance 
with  the  electrical  requirements  of  MIL-M- 
38510  slash  sheet  or  vendor  or  contractor 
electrical  specification.  The  device  must  be 
qualified  to  requirements  of  MIL-STD-883. 

Method  5005.  Class  C.  No  waivers  are  allowed. 

1)0 

1 

D 

Commercial  (or  non-mil  standard*  part, 
hermetically  sealed,  with  no  screening 
beyond  the  manufacturer’s  regular  quality 
assurance  practices. 

150 

] 

D-l 

L  - 

Commerical  (ot  non-mil  standard)  part, 
packaged  or  sealed  with  organic  materials 
(e.g..  epoxy,  silicone,  or  phenolic). 

300  j 

1 
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Appendix  D 

ABSTRACT  OF  BUILDING  SPECIFICATION 
RELATING  TO  ELEVATOR  CONTROLLERS  AND  SENSORS 
USS  AMERICA  (CVA-66) 


This  specification  was  a  modification  to  CVA-66,  it  is  not  the  original  building  specification. 
Elevator  travel  speeds  shall  be  37.5m/min  (125  ft/min)  and  6m/min  (20  ft/min).  Magnetic  contactors 
on  controllers  are  for  110  VAC,  60  Hz. 

The  coils  of  the  solenoid  valves  are  1 10-120  VAC  60  Hz  with  an  inrush  current  of  3  A  and  hold¬ 
ing  current  of  0.5A.  The  operating  coils  shall  be  energized  only  sufficiently  long  to  remove  the  spool  in 
the  hydraulic  control  valve  from  one  position  to  the  other  where  it  will  remain  after  the  coil  has  been 
de-energized 

Access  to  the  trunk  is  by  vertical  or  horizontal  doors  at  each  station  and  by  horizontal  ballistic 
hatch  covers  at  the  main  and  third  deck.  The  hatch  covers  and  doors  shall  be  so  interlocked  that  (a)  no 
two  doors  in  one  trunk  can  be  opened  at  any  one  time,  (b)  both  hatch  covers  cannot  be  opened  at  any 
one  time,  and  (c)  no  door  can  be  opened  when  the  main  deck  hatch  cover  is  open. 

Control  systems  shall  consist  of  a  fully  automatic  static-logic  system  and  a  manual  system  permit¬ 
ting  jogging  (only  in  slow  speed)  through  direct  control  of  the  magnetic  contactors  in  the  motor  con¬ 
troller. 

Fully  automatic  control  of  the  hatch  covers  at  the  third  and  main  deck  will  be  required  including 
the  control  of  the  dogging  arrangement  in  hatch-closed  position  and  the  latching  arrangement  in  open 
position. 

Trunk  access  doors  shall  be  push-button  controlled  for  opening  and  closing  from  the  particular 
access  level  concerned.  Access  door  dogging  is  manual  and  will  not  require  interlocks.  Access  doors 
on  elevator  platforms  shall  be  interlocked  to  preclude  opening  more  than  one  door  at  a  lime,  opening 
an  access  door  if  the  elevator  platform  is  not  at  that  particular  level,  and  dispatching  the  elevator  plat¬ 
form  if  the  access  door  at  that  level  is  not  closed. 

In  emergency  mode  the  hatches  will  be  opened  by  manipulating  the  hydraulic  valve  and  the  eleva¬ 
tor  jogged  from  either  the  main  control  station  or  the  elevator  machinery  room. 

Common  switches  and  cabling  shall  not  be  used  for  the  automatic  and  manual  modes.  There 
should  be  an  automatic-manual  selector  switch  in  the  elevator  machinery  room. 

Mechanical-type  switches  shall  be  furnished  to  de-energize  the  motor  and  brake  when  the  plat¬ 
form  overtravels  in  either  direction. 

The  static  control  and  static  switches  need  not  be  a  qualified  product  b,.  rhould  be  tested  for 
high-intensity  shock,  vibration  and  electromagnetic  radiation. 

Except  for  static  switches,  the  equipment  shall  be  suitable  for  operation  at  50°C  ambient  tempera¬ 
ture.  Static  switches  shall  be  suitable  for  65°C  ambient. 
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Mechanical  switches  are  used  for  overtravel,  in  connection  with  door  opening  and  closing,  and 
related  to  jogging. 

All  equipment  which  requires  installation  in  the  elevator  trunks  and  at  the  forward  side  on  the 
fourth  deck  of  elevator  number  5 A  shall  be  explosion  proof  Class  I  group  D  environment  defined  by 
NEMA. 

Enclosures  in  the  elevator  machinery  room  shall  be  drip-proof.  All  other  equipment  shall  be 
spray-tight. 

If  the  elevator  is  going  to  the  main  deck  and  receives  no  hatch-clear  signal  within  5s  of  arriving  at 
the  stow  level,  the  dispatch  shall  be  cancelled  and  a  new  dispatch  order  is  required. 

For  upward  travel  to  the  second  deck,  the  third  deck  hatch  remains  open.  This  hatch  closes  only 
for  travel  to  the  main  deck  and  then  only  after  stowage. 

The  elevator  departs  at  high-speed  except  under  jogging.  Upon  approaching  a  level,  the  speed 
shall  be  transferred  from  high  to  low  and  finally  stop  with  an  accuracy  of  ±0.6  25  cm  (±1/4  in.). 

When  the  platform  is  being  dispatched  to  an  intermediate  level,  the  slow  and  stop  switches  at  the 
end  of  the  trunk  in  the  direction  of  travel  shall  also  act  in  case  the  switches  at  the  intermediate  level 
fail.  This  will  also  apply  to  the  stowage  level  sensors  to  prevent  running  into  a  closed  main  deck  hatch 
cover.  An  interlock  switch  is  provided  at  the  stowage  level  to  allow  an  access  door  to  be  opened  at  the 
second  deck  level  when  the  platform  is  at  stowage. 

Emergency  override  at  the  main  deck  does  not  operate  when  the  main  deck  hatch  is  fully  closed. 
When  the  hatch  is  partly  open  or  fully  open,  momentary  actuation  cancels  all  orders  and  dispatches  the 
platform  to  "stow"  at  high  speed.  Upon  reaching  "stow"  the  main  deck  hatch  is  automatically  closed  and 
dogged.  There  are  locking  bars  tor  the  platform  while  at  stow. 

Four  slack-cable  devices  and  an  overspeed  device  are  required.  These  slack-cable  and  overspeed 
conditions  shall  not  prevent  jogging  either  up  or  down. 

A  safe  or  dispatch  signal  shall  consist  of  a  potential  difference  from  ground  or  chassis  into  the 
logic.  When  the  potential  returns  to  ground  it  causes  an  unsafe  signal. 

Duplicate  slow-down  switches  shall  be  provided  for  the  upper  and  lowermost  landings  of  each 
elevator.  If  the  slow  switch  has  failed  to  open  the  high  speed  contactors,  the  second  slow  switch  inter¬ 
rupts  all  power  to  the  motor  and  brake.  The  high-speed  contactor  provides  a  signal  different  from 
ground  when  open,  and  the  slow-speed  contactor  provides  a  signal  different  from  ground  when  closed. 

The  auxiliary  contacts  on  the  high  and  slow  contactors  shall  be  connected  in  series  to  form  one 
input  signal  to  the  logic.  No  single  failure  of  any  component  in  the  control  system  or  wiring  shall  cause 
unscheduled  operation  of  the  controlled  equipment.  An  analysis  shall  be  made  documenting  the  effects 
of  all  failure  modes  of  the  components  and  wiring. 

The  motor  controller  will  have  a  power-on  indicator  light  and  a  neon  indicator  light  in  parallel 
with  the  emergency  stop  switches.  The  power  supply  for  the  logic  will  be  designed  to  absorb  transients 
of  ±20%  in  the  AC  power  supply  without  causing  malfunctions.  Printed  circuit  boards  will  be  to  MIL- 
P-13949D.  Semiconductors  and  integrated  circuits,  if  not  selected  from  MIL-STD-701F.  will  be  tested 
in  accordance  with  MIL-STD-202  method  106B.  Cabinets  will  be  drip-proof  to  MIL-E-2036. 

A  10  000-h  non-resetable  elapsed  time  meter  shall  be  installed.  The  device  need  not  be  shock 
resistant  and  not  necessarily  visible  from  outside  of  the  cabinet. 
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A  GO/ NO-GO  tester  shall  be  provided.  The  tester  shall  include  10%  of  every  card  type  but  at 
least  one  card  of  any  type  for  the  most  complicated  elevator  system  on  the  ship.  These  cards  are  not 
considered  as  spares. 

Potting  of  electronic  components  should  be  avoided  except  that  this  requirement  does  not  apply  to 
static  switches.  No  assembly,  except  static  switches,  shall  be  furnished  which  will  not  permit  emer¬ 
gency  repair  including  the  removal  and  replacement  of  semiconductors  without  undue  damage  to 
printed  circuit  boards.  A  means  for  checking  the  status  of  input  devices  is  needed. 

Static  switches  for  safety  purposes  shall  provide  a  logic  one  output  to  indicate  a  safe  condition. 
Logic  one  is  different  from  ground.  Static  switches  have  an  output  logic  one  when  the  switch  is  not 
actuated  by  a  device.  Platform  sensing  accuracy  must  be  ±0.156  cm  (±  1/16  in.)  at  within  1.25  cm  (1/2 
in.)  from  the  sensor. 

Static  switches  shall  be  watertight  and  explosion  proof  to  MIL-E-2036C  (NAVY),  and  shock  proof 
to  MIL-S-901C  (NAVY)  for  Grade  A,  Class  1,  Type  A.  Static  switches  shall  have  6  m  (20  ft)  of 
molded,  flexible  shielded  integral  cable. 

Reliability  objectives  for  the  system  are  2  000  h  mean  operating  time  between  failure.  Preventa¬ 
tive  maintenance  should  not  be  scheduled  for  operating  time  segments  of  100  h.  Preventative  mainte¬ 
nance  scheduled  for  1  000  h  segments  must  be  such  that  it  is  possible  to  return  to  an  operating  condi¬ 
tion  upon  command  within  20  min.  Planned  maintenance  and  repair  personnel  ability  level  is  that  of 
an  Electricians  Mate  third  class  as  defined  in  the  manual  of  "Qualifications  for  Advancement  in  Rating" 
NAVPERS  18068- A. 
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ABSTRACTS  FROM  NOTES  BY  ELEVATOR  MAINTENANCE  PERSONNEL 

ON  THE  USS  NIMITZ 

Subj:  Lower  stage  weapons  elevator  #1;  Status  of 

1.  Proximity  switch  41  amplifier  improperly  labeled.  Should  be  "Main  Deck  Door  Unlatched." 

2.  Elevator  Hoist  Motor  Controller  "power  on"  indicating  light  is  out. 

3.  Hold  door  will  only  partially  undog.  Proximity  switch  78  amplifier  indicating  light  does  not  come 
on. 

4.  Unlatch  proximity  switches  61  and  79  only  operate  intermittently. 

5.  Second  platform  aft  door  won’t  undog. 

6.  There  is  no  signal  to  the  third  deck  hatch  pin  secure  solenoid  even  though  proximity  switch  amp 
has  an  output. 

7.  "Elevator  here"  light  on  second  deck  works  with  elevator  movement  in  down  direction  only. 
Second  deck  up  stop  proximity  switch  #5  does  not  work  with  elevator  movement  in  up  direction. 

8.  Main  deck  door  won’t  open.  No  signal  from  D10B. 

Subj:  Lower  stage  weapons  elevator  #2;  Status  of 

1.  Sixth  deck  inboard  door  unlatch  proximity  switch  67  not  operating  properly. 

2.  Fifth  deck  inboard  door  "closed'  proximity  switch  62  amplifier  puts  out  a  constant  signal  irregard- 
less  of  door  position. 

3.  Inboard  and  starboard  doors  on  the  fourth  deck  are  inoperative  due  to  faulty  magazine  interlock 
proximity  switch  circuit  (PS  76  &  77). 

4.  Second  deck  door  won’t  open  because  undog  solenoid  consistently  blows  fuse  F40. 

5.  Supplies  stowed  on  top  of  main  deck  hatch.  Therefore  could  not  inspect  on  station  main  deck, 
hatch  sequence,  or  hatch  operation. 

Subj:  Lower  stage  weapons  elevator  #3;  Status  of 

1.  Hold  port  door  unlatched  proximity  switch  89  amplifier  indicating  light  is  not  on  with  door  closed. 

2.  Third  deck  hatch  pin  secured  proximity  switch  41  amplifier  indicating  light  on  with  hatch  closed. 

3.  Hold  aft  door  extend  ramp  solenoid  fuse  FI  10  blown. 

4.  Could  not  operate  elevator  due  to  bent  cable  sheath. 


G  O.  THOMAS 


Subj:  Lower  stage  weapons  elevator  #4;  Status  of 

1.  Hold  slow-speed  proximity  switch  25  amplifier  indicating  light  inoperative. 

2.  Amplifier  indicating  light  doesn't  work  for  unlatch  proximity  switchs  70,  75,  82,  and  89. 

3.  Hold  starboard  door  won't  undog--SCR  amplifier  G5B  probably  defective. 

4.  Hold  forward  door  won’t  open. 

5.  Second  platform  starboard  door  won’t  undog— SCR  amplifier  G2B  probably  defect.ve. 

6.  Second  platform  forward  door  won't  open  — set-reset  memory  E5B  has  no  output. 

7.  First  platform  starboard  door-open  solenoid  missing. 

8.  First  platform  starboard  door  ramp-extend  fuse  F72  continually  blows. 

9.  First  platform  forward  door  proximity  switch  64  amplifier  indicating  light  doesn't  work. 

10.  Several  solenoids  in  machinery  room  have  puddles  of  cellulube  beneath  them. 

Subj:  Lower  stage  weapons  elevator  #5;  Status  of 

1.  Hold  port  door-open  solenoid  missing. 

2.  Hold  aft  door  will  not  open-down-stop  proximity  switch  27  inoperative. 

3.  Second  platform  port  and  aft  doors  will  not  open. 

4.  Second  platform  aft  door  unlatch  proximity  switch  87  amplifier  indicating  light  out 

5.  First  platform  port  door  will  not  open. 

6.  Fourth  deck  port  and  starboard  doors  will  not  open. 

7.  Second  deck  forward  door  keeps  blowing  fuses. 

8.  Third  deck  hatch  can’t  be  closed-mechanical  problem. 

9  First  platform  starboard  and  aft  doors,  fourth  deck  forward  and  aft  doors  could  not  be  tested. 
Subj:  Lower  stage  weapons  elevator  #6;  Status  of 

1.  Third  deck  hatch  always  open  due  to  mechanical  problems. 

2.  Proximity  switch  amplifier  97  has  no  SD  tag  (third  deck  hatch  pins  unsecured). 

3.  Fifth  deck  port  door  won’t  ciose-PS  60  inoperative. 

4.  Sixth  deck  forward  door  won't  open-Fl  1 1  blows  (undog). 

5.  Fifth  deck  forward  door  won’t  open-F83  (PS67  undog)  blows. 
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6.  Fifth  deck  starboard  door  won't  open. 

7.  Couldn’t  check  stow  level  due  to  third  deck  hatch  problem. 

8.  PS95  and  102  operate  intermittently-seventh  deck  (hold)  forward  and  starboard  doors  unlatched. 
Subj:  Upper  stage  weapons  elevator  #1;  Status  of 

1.  01  level  forward  door  open  solenoid  is  missing. 

2.  01  level  forward  door  will  not  dog  automatically  due  to  faulty  dog  solenoid  or  SCR  E8B. 

3.  Elevator  cannot  be  sent  from  stow  to  01  level. 

4.  Flight  deck  hatch  will  not  open. 

Subj:  Upper  stage  weapons  elevator  #2;  Status  of 

1.  Second  deck  port  door  ramps  won't  retract  and  door  won’t  dog  automatically. 

2.  Main  deck  aft  door  won’t  open. 

3.  Main  deck  aft  door  ramp  retract  proximity  switch  amplifier  59  has  no  output  when  ramp  is 
retracted. 

4.  Elevator  can’t  be  sent  from  main  deck  to  second  deck  electrically— possible  defective  SCR  E1B. 

5.  Elevator  will  not  stop  at  02  level  regardless  of  direction  of  travel  or  barrel  switch  positions. 

6.  Could  not  test  02  level  starboard  door  for  reason  stated  in  5. 

7.  Flight  deck  hatch  undogged  proximity  switch  19  operates  intermittently. 

8.  This  elevator  has  a  major  memory  logic  problem  that  precluded  the  testing  of  on  station  flight 
deck  or  flight  deck  hatch. 

Subj:  Upper  stage  weapons  elevator  #3;  Status  of 

1.  Main  deck  hatch  inboard  ramp-retracted  proximity  switch  29  operates  intermittently. 

2.  Second  deck  starboard  door  will  not  open. 


Appendix  F 

WEAPONS  ELEVATOR  INSPECTION -GENERAL  COMMENTS  BY 
ELEVATOR  MAINTENANCE  PERSONNEL  ON  THE  USS  NIMITZ 

Subj:  Weapons  Elevator  Inspection— General  Comments 

1.  The  number  of  major  discrepancies  discovered  during  this  inspection  are  considered  to  be  exces¬ 
sive  given  the  importance  of  the  equipment. 

2.  Communication  of  known  discrepancies  between  the  operators  and  maintenance  personnel  is 
inadequate. 

3.  It  is  suggested  that  the  normal  functions  of  the  elevators  be  tested  at  least  once  a  month  by 
knowledgeable  personnel. 

4.  Maintenance  personnel  should  be  cross-trained  as  operators  and  have  a  thorough  understanding  of 
the  elevators'  sequence  of  operation. 

5.  All  proximity  switches  should  be  inspected  at  least  once  a  quarter  for  proper  operation.  The  prox¬ 
imity  switch  nulls  and  amplifier  rheostats  should  be  adjusted  only  during  this  inspection,  if  neces¬ 
sary,  and  not  independently,  (as  a  matter  of  course)  while  trouble-shooting.' 

6.  Manual  overriding  of  the  hydraulic  valve  solenoids  should  only  be  done  upon  the  concurrence  of 
both  an  electrician  and  an  aviation  ordnanceman. 

7.  The  knowledge  level  of  the  equipment  currently  held  by  maintenance  personnel  is  considered  to 
be  too  low  for  proper  elevator  electrical  maintenance. 

8.  To  insure  proper  operation  these  elevators  must  be  kept  in  adjustment.  In  order  to  do  this  and 
reduce  the  large  amount  of  corrective  maintenance  currently  needed  it  is  suggested  that  a  more 
comprehensive  preventive  maintenance  package  be  compiled  and  inaugurated. 
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INPUTS,  FUNCTIONS  AND  OUTPUTS  OF  THE 
PDP-14  LOGIC  CONTROLLER 

INPUTS  TO  LOGIC  CONTROLLER  (Figure  S-S) 

The  following  interlocks,  and  switches  provide  the  Logic  Controller  with  information  concerning 
the  status  of  the  elevator  and  the  commands  requested.  The  inputs  are  received  in  the  ENCODER 
INTERFACE  unit  or  the  INPUT  BOX  A  of  the  PDP-14  system.  It  is  assumed  that  on  the  Motor  Con¬ 
troller,  the  NORMAL/ JOG  switch  is  in  the  NORMAL  position. 

a.  ROM  Interlock  (Safety)  (Figure  5-5  Sht.  2)  —  This  interlock  furnishes  an  AC  input  to  the 
controller  to  indicate  the  Safety  Interlock  circuit  is  complete.  If  the  OVERTRAVEL  BYPASS  on  the 
Motor  Controller  is  turned  to  the  UP  or  DOWN  position,  the  ROM  Interlock  portion  of  the  switch  will 
be  opened,  causing  the  PDP-14  to  stop  its  dispatch.  When  the  NORMAL/JOG  switch  is  placed  in  the 
JOG  position  it  will  also  disconnect  the  ROM  Interlock  circuit.  This  signal  is  connected  to  INPUT  BOX 
A  of  the  PDP-14  unit. 

b.  LOCKBARS  EXTENDED  Limit  Switch  (Figure  5-5  Sht.  2)  —  When  the  lockbars  are 
extended  an  AC  input  is  provided  to  the  controller.  This  signal  is  connected  to  INPUT  BOX  A  of  the 
PDP-14  unit. 

c.  LOCKBARS  RETRACTED  Limit  Switch  (Figure  5-5  Sht.  2)  —  When  the  Lockbars  are 
retracted  an  AC  input  is  provided  to  the  controller.  This  signal  is  connected  to  INPUT  BOX  A  of  the 
PDP-14  unit. 

d.  HS  INTERLOCK  (Figure  5-5  Sht.  2)  —  This  interlock  will  provide  an  AC  Input  when  the 
elevator  is  operating  in  the  LOW  SPEED  mode.  During  HIGH  SPEED  operation  the  interlock  will  be 
interrupted.  This  signal  is  connected  to  INPUT  BOX  A  of  the  PDP-14  unit. 

e.  ENCODER  Unit  (Figure  5-5  Sht.  5)  —  This  unit  provides  the  controller  with  a  13  bit  binary- 
number  which  represents  the  location  of  the  elevator  platform  in  the  trunk.  The  encoder  also  sends  a 
complementary  13  bit  binary  number  which  is  used  in  a  self  checking  feature.  Power  for  the  encoder  is 
provided  by  the  encoder  interface  unit  and  is  a  +5  VDC.  This  13  bit  binary  signal  of  5V  level  is  con¬ 
nected  to  the  encoder  interface  as  an  input. 

f.  PROXIMITY  Switches  (Figure  5-5  Sht.  5)  —  There  are  26  of  these  switches  providing  the 
following  information  to  the  PDP-14:  A-  platform  high  leveling  (l),  and  platform  low  leveling  (1):  B- 
3rd  Deck  Hatch,  dogged  (2),  undogged  (2),  opened  (2),  closed  (2).  latches  (2),  and  unlatched  (2).  C- 
Main  Deck  Hatch,  dogged  (2),  undogged  (2),  opened  (2),  closed  (2),  latches  (2).  and  unlatched  (2). 
The  switches  operate  on  a  28VDC  which  is  supplied  by  a  special  28VDC  Power  Supply  located  in  the 
logic  controller.  The  switch  is  a  type  8-078-02  proximity  switch  which  means  it  is  configured  in  the 
normally  open  position  or  de-actuated  with  the  target  away.  The  signals  from  the  switches  are  con¬ 
nected  to  the  encoder  interface  unit.  The  logic  control  has  a  test  feature  for  use  with  the  proximity 
switches  which  will  be  covered  under  test  equipment  and  features. 

g.  DISPATCH  Commands  (Figure  5-5  Sht.  4)  —  These  AC  signals  are  originated  at  the  various 
control  stations  in  the  system.  Pressing  the  dispatch  push  buttons.  Main  Deck,  Stow,  2nd  Deck.  4th 
Deck,  1st  Platform,  Dispatch  Enable.  Hatch  Clear,  or  EMERGENCY  OVERRIDE  will  provide  the 
PDP-14  with  the  appropriate  request.  The  signals  are  connected  to  the  AC  INPUT  BOX. 
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LOGIC  CONTROLLER  FUNCTIONS 

This  controller  was  designed  to  replace  relay  and  static  logic  control  systems.  The  automatic 
selection  and  control  of  the  various  functions  of  the  elevator  is  accomplished  primarily  by  the  PDP-14 
control  system.  The  PDP-14  will  take  an  incoming  command  signal,  check  it  against  the  status  of  the 
system,  and  using  a  Read  Only  Memory  Unit,  initiate  commands  in  a  logical  sequence  to  complete  the 
function  requested.  The  logic  controller  is  used  only  in  the  NORMAL  (Automatic)  mode.  The  major 
components  of  the  logic  controller  are  discussed  below.  All  references  are  to  Figure  5-5. 

a.  POWER  UNIT  (Figure  5-5  Sht.  6)  —  This  unit  is  a  Technipower  Inc.  Type  M-28  0-6.0G 
power  supply.  Using  115  VAC  input  it  produces  an  output  of  28  VDC  which  is  used  to  supply  the 
power  requirements  for  the  proximity  switches. 

b.  A.C.  INPUT  BOX  A  —  BXI4-DA  (Figure  5-5  Sht.  4)  —  The  input  box  is  a  part  of  the  PDP- 
14P  system.  This  unit  has  the  capability  of  receiving  32  inputs,  however,  at  present  only  16  are  used. 
The  function  of  the  input  box  is  signal  conditioning,  isolation,  and  input  selection.  The  four  K578 
modules  (each  capable  of  processing  8  signals)  receive  the  115  VAC  incoming  signals,  where  they  are 
reduced  and  isolated  thru  a  step  down  transformer,  then  rectified  and  filtered  to  provide  a  5  VDC  sig¬ 
nal.  A  small  LED  lamp  on  each  input  line  will  indicate  when  a  signal  is  present.  The  input  box  which 
is  constantly  being  scanned  by  the  Control  Unit  using  a  SELECTION  CODE  and  PACKAGE  SELECT 
for  a  SAMPLE  RETURN  (signal).  A  PACKAGE  SELECT  signal  from  the  control  unit  is  sent  to  the 
K136  GATE  module  which  will  then  allow  the  two  K161  DECODER  modules  to  respond  to 
SELECTION  CODE.  An  active  input  provides  a  5  VDC  signal  on  the  SAMPLE  RETURN  LINE  and 
an  absence  of  input  provides  a  zero  voltage.  The  Control  Unit  will  select  one  of  the  two  signals  pro¬ 
cessed  by  the  K161  modules. 

c.  OUTPUT  BOX  —  BYI4-DA  (Figure  5-5  Shts.  4  and  6)  —  The  controller  has  a  total  of  three 
output  boxes,  which  are  a  part  of  the  PDP-14  system.  In  the  elevator  drawings  they  are  labeled  A,  B. 
and  C.  Each  output  box  has  the  capability  of  receiving  16  output  commands;  however,  16  for  A  box. 
12  for  B  box,  and  4  for  C  box  are  used  at  the  present  time.  The  functions  for  the  output  boxes  are 
output  selection  (and  testing),  output  function  command,  and  Isolated  AC  output  switching. 

(1)  A  PACKAGE  SELECT  signal  from  the  control  unit  is  sent  to  the  K135  GATE  module  to 
activate  2  particular  output  boxes  and  select  one  of  two  K161  DECODERS.  This  will  enable 
the  K161  DECODERS  to  respond  to  the  SELECTION  CODE  which  in  turn  selects  one  output 
control  circuit  of  eight  contained  on  the  two  K207  Stowage  Registers.  There  are  a  total  of  four 
K207  Registers  in  each  output  box,  each  register  contains  four  output  control  circuits.  Each  of 
these  outputs  is  used  to  control  an  AC  output  on  a  K616  ISOLATED  AC  SWITCH  module. 
There  are  four  K616  modules  in  each  output  box.  The  output  of  the  K207  Stowage  Register 
will  turn  ON  or  OFF  a  solid  state  AC  control  device  in  the  K616  module.  This  will  activate  or 
deactivate  the  external  solenoid  or  device  that  is  required. 

(2)  When  the  Control  Unit  sends  its  SELECTION  CODE,  it  can  also  issue  one  of  these  func¬ 
tional  commands,  ENABLE  SET,  ENABLE  RESET,  and  CLEAR.  ENABLE  SET  will  turn  on 
a  K207  control  circuit  corresponding  to  the  selected  output.  The  ENABLE  RESET  will  turn  the 
circuit  off.  The  CLEAR  signal  will  turn  every  output  circuit  off,  regardless  of  selection  The 
K207  will  remain  in  its  present  state  until  another  command  is  received,  meaning  it  acts  as  a 
memory  device.  When  the  PDP-14  system  is  stopped  and  then  restarted,  all  K207  output  cir¬ 
cuits  are  turned  off,  just  as  if  the  CLEAR  command  had  been  issued. 

(3)  When  the  SELECTION  CODE  has  selected  an  output,  a  SAMPLE  RETURN  indicates  the 
condition  of  the  selected  K207  to  the  Control  Unit.  All  the  K207  modules  are  continuously 
scanned  for  status  via  SAMPLE  RETURN  signal  regardless  of  whether  a  command  has  been 
issued  or  not. 
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A  LED  lamp  provides  an  indication  when  the  K616  module  is  providing  an  output  to  the  eleva¬ 
tor. 

(4)  Due  to  the  large  inrush  currents  required  by  the  four  Up  and  Down,  Slow  and  High  Speed 
contactors  in  the  Motor  Controller,  it  was  necessary  to  provide  AC  solid  state  intermediate 
relays,  which  are  controlled  from  the  K657  output  circuits  of  a  BY14-DA  output  box.  The 
solid  state  relays  in  turn  control  the  current  to  the  main  contactor  coils. 

d.  ACCESSORY  BOX  —  BAI4  —  The  accessory  box  is  physically  identical  to  the  input  and  out¬ 
put  boxes.  There  are  no  AC  circuits  in  the  Accessory  box  and  the  entire  space  is  therefore  available  for 
time  delay  modules.  Six  are  used  in  this  application.  Each  accessory  box  functions  in  SET,  RESET, 
and  TEST  operations,  exactly  as  an  output  box  and  therefore  contains  groups  of  K 135  GATES,  K161 
DECODERS  and  K207  STORAGE  REGISTERS  in  addition  to  the  K302  timers.  The  meaning  of  the 
SET  and  RESET  commands  is  similar  to  the  output  box;  they  activate  or  deactivate  the  selected  output 
circuit.  The  TEST  command  produces  a  SAMPLE  RETURN  which  indicates  the  operation  of  the 
selected  device. 

(1)  Each  K302  timer  is  separately  adjustable  for  the  desired  time,  depending  on  the  function  as 
below: 


APPROXIMATE  ACTUAL 

TIME  SETTING  (s)  TIME  SETTING  <s) 


DY60  STOP  DELAY  0.1 

DY61  POSITIONING  DELAY  5  0 

DY62  HATCH  OPERATION  DELAY  35.0 

DY63  POSITIONING  FAILURE  DELAY  10.0 

DY64  EMERGENCY  OVERRIDE  DELAY  2.0 

DY65  HIGH  SPEED  STOP  DELAY  0.1 

DY66  HATCH  CLEAR  TIMER  25.0 

DY67  MASTER  CLOCK  0.5 

DY70  ENCODER  ROTATION  FAILURE  DELAY  1.25 

DY71  LOCKBAR  TIMER  5.0 

DY72  LEVELING  PULSE  TIMER  0  1 


(2)  As  in  all  output  circuits,  a  timer  is  normally  OFF.  A  timing  cycle  is  begun  by  a  SET  com¬ 
mand  from  the  PDP-14  Control  Unit.  At  the  end  of  the  time  delay,  the  timer  output  turns  ON 
until  a  RESET  command  turns  it  OFF.  In  other  words  the  timer  is  a  delayed  ON  type. 

e.  ENCODER  INTERFACE  UNIT  (Figure  5-5  Sht.  5)  —  The  Encoder  Interface  Unit  is  a  small 
frame  which  contains  logic  circuits  to  interface  the  Encoder  to  the  control  system  and  provide  D  C. 
input  capability  for  the  Proximity  switches.  The  unit  is  made  up  of  seven  sections,  a  Power  Supply,  a 
Nixie  Tube  display,  an  Equality  Detector,  a  Comparator,  a  Matrix  Driver,  a  D.C.  Input  box  and  a  Par¬ 
tial  Output  box. 

(1)  POWER  SUPPLY  —  The  Power  Supply  is  made  up  of  a  K74I  transformer  module  to  pro¬ 
vide  12.6  VAC  for  the  Nixie  tubes,  a  K731  +5  VDC  power  supply  and  regulator  module  and 
the  K732  slave  regulator  module  which  is  added  to  increase  the  +5  VDC  output  of  the  K731 
module  to  3  amps  which  provides  power  to  the  Encoder  Unit  in  the  Machinery  Room.  The 
power  bus  of  the  PDP-14  control  unit  is  tied  in  parallel  with  the  output  of  this  power  supply 
and  is  large  enough  to  handle  the  interface  without  the  K73I  and  K732  modules,  however,  the 
K74I  transformer  is  still  required  for  the  Nixie  tube  display. 
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(2)  NIXIE  TUBE  DISPLAY  —  This  display  uses  five  K.415  modules  to  indicate  the  Encoder 
number  in  Octal  form  (base  eight  numbers),  this  number  gives  the  relative  position  of  the  plat¬ 
form  in  the  trunk.  The  numbers  are  expressed  in  base  eight  due  to  the  ease  in  converting  from 
base  two  to  base  eight  and  because  base  two  numbers  are  very  difficult  to  remember 

(3)  EQUALITY  DETECTOR  —  Since  during  operation  of  the  elevator,  the  operator  would 
have  no  way  of  knowing  if  the  Encoder  is  operating  properly  until  a  casualty  occured,  the  Inter¬ 
face  unit  utilizes  the  fact  that  the  Encoder  puts  out  a  complementary  output  for  each  normal 
output  and  detects  if  any  two  outputs,  that  should  be  opposite,  are  equal.  If  this  occurs,  a  sig¬ 
nal  is  given  to  the  Control  Unit  of  the  PDP-14  and  the  elevator  is  stopped. 

NOTE 

Such  a  failure  could  occasionally  occur 
due  to  noise  in  the  system,  loose  wiring 
or  an  occasional  bounce  of  a  brush  in 
the  Encoder.  If  this  should  occur  the 
power  to  the  elevator  must  be  turned 
off  and  then  on  before  the  system  will 
operate  again. 

(4)  COMPARATOR  —  This  section  tells  the  PDP-14  Control  Unit  whether  the  Encoder  out¬ 
put  Binary  number  is  above  or  below  the  Matrix  Pinboard  output  number.  The  Comparator 
simply  compares  the  Matrix  Output  to  the  Encoder  output  and  gives  a  signal  out  if  the  Encoder 
number  is  lower  (Platform  higher).  The  controller  understands  that  if  there  is  no  signal  that 
the  Platform  is  lower  than  the  reference  line,  and  that  if  there  is  a  signal  that  the  Platform  is 
higher  than  the  reference  line.  The  Comparator  does  not  give  any  indication  of  "how  much" 
only  "above  or  below." 

(5)  MATRIX  DRIVER  —  This  section  combines  the  twelve  LEVEL  inputs  (outputs  from  the 
Control  Unit  but  inputs  to  the  Matrix  Driver)  and  the  four  OPERATIONAL  inputs  to  produce 
48  outputs  to  the  Matrix  Pinboard.  The  Matrix  Driver  uses  simple  "AND"  logic  to  take  one 
LEVEL  input  and  one  OPERATIONAL  input  to  obtain  one  Matrix  output.  For  example,  if  the 
Platform  was  traveling  up  to  the  2nd  Deck  in  high  speed,  the  controller  would  want  to  know 
when  it  should  slow  down.  Therefore,  once  during  each  pass  of  the  program  it  would  energize 
the  2ND  DECK  output  and  the  UP-SLOW  output.  The  Matrix  Driver  would  combine  these 
inputs  and  energize  an  output  corresponding  to  the  2ND  DECK  UP-SLOW  position. 

NOTE 

It  should  be  noted  that  this  elevator 
uses  only  six  of  the  twelve  outputs 
since  only  six  individual  levels  are 
served  in  this  installation. 

(6)  D.C.  INPUT  BOX  —  This  input  box  serves  the  same  purpose  as  the  A.C.  input  box  dis¬ 
cussed  previously,  except  the  input  modules  are  four.  K564  modules.  The  four  modules  each 
have  8  inputs  available  for  use.  Three  use  all  8  inputs  while  the  fourth  uses  only  2  inputs. 
They  accept  a  DC  voltage  of  28  V  from  the  proximity  switches  and  convert  it  to  a  5  VDC  sig¬ 
nal. 

(7)  PARTIAL  OUTPUT  BOX  —  The  Control  Unit  of  the  Logic  Controller  has  one  output 
slot  (16  outputs)  assigned  to  the  Interface  unit.  These  outputs  are  energized  when  the  program 
requests  the  position  of  the  Platform  with  respect  to  a  position  given  by  the  Matrix  Pinboard. 
This  output  is  exactly  the  same  as  the  other  Output  boxes  except  they  are  not  in  the  same 
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enclosure  and  they  are  never  raised  above  the  +5  VDC  level.  The  outputs  are  instead  fed 
directly  into  the  "Matrix  Driver." 


NOTE 

Twelve  outputs  correspond  to  the  vari¬ 
ous  levels  of  the  elevator.  Main  Deck, 

Sequence  Level,  2nd  Deck,  etc.  and 
four  outputs  correspond  to  positions 
around  the  levels;  Up-Slow,  Up-Stop, 

Down-Stop  and  Down-Slow. 

f.  MATRIX  PINBOARD  —  This  is  an  AMP,  Inc.,  Type  397070-5  unit  that  is  an  operational 
part,  although  not  a  physical  part,  of  the  Encoder  Interface  Unit. 

(1)  The  Pinboard  is  a  very  simple  mechanical  device  consisting  of  vertical  and  horizontal  rows 
of  gold-plated  metal  strips  which  are  layed  out  to  accept  diode  pins,  which  connect  these  strips 
through  diodes.  The  horizontal  strips  are  connected  to  the  outputs  of  the  Matrix  Driver  and 
the  vertical  strips  are  inputs  to  the  Comparator  section  of  the  Interface  unit. 

1 2)  Only  one  input  to  the  Pinboard  can  be  accepted  at  any  one  lime.  This  input  energizes  a 
particular  horizontal  strip  which  in  turn  energizes  the  vertical  strips  that  have  a  Diode  Pin  at  the 
intersection  of  the  horizontal  strip.  The  Diode  Pins  act  as  conductors  from  the  horizontal  strips 
to  vertical  strips  but  are  non-conductors  from  vertical  strips  to  horizontal  strips. 

g.  CONTROL  UNIT  —  This  unit  is  a  type  PDP-14  consisting  of  a  DA-14L  Computer  Interface, 
MR- 14  Read  Only  Memory  (ROM)  and  M232  Storage  Module. 

(1)  To  accomplish  its  purpose,  the  PDP-14  tests  the  status  of  its  input  devices,  consisting  of  data 
from  the  Encoder,  dispatch  orders  from  pushbuttons  and  signals  from  safety  devices  that  show  the 
elevator  is  in  a  safe  operating  condition.  It  also  tests  its  outputs,  which  consist  of  signals  to  the  Motor 
Controller  contactors  and  relays,  the  coils  of  solenoid  operated  hydraulic  valves  and  the  indicator  lights 
showing  the  position  of  the  platform.  The  PDP-14  compares  these  conditions  one  at  a  time  with  infor¬ 
mation  from  the  control  program  within  the  ROM.  The  results  of  these  comparisons  cause  outputs 
associated  with  these  conditions  to  be  turned  "on"  or  "off."  The  PDP-14  Control  Unit  interrogates  the 
inputs  and  outputs  continuously  in  a  cyclic  fashion. 

(2)  The  Read  Only  Memory  contains  all  PDP-14  control  system  instructions  in  a  pattern  or  braid 
of  wires.  This  pattern  is  actually  a  list  of  permanently  wired  electrical  instructions  which  are  read  by  the 
Control  Unit  to  dictate  the  system's  operation. 

(3)  The  storage  module  provides  16  dummy  output  circuits  to  be  used  by  the  ROM  program. 
This  module  is  a  single-height  module  which  replaces  the  cabl'  normally  used  to  attach  an  “0"  box  or 
"A"  box  to  the  control  unit. 

(4)  For  a  detailed  theory  of  operation  see  PDP-14  system  maintenance  manual  DEC-14-HGZB-D 
chapter  3. 

h.  SUPPORT  TEST  EQUIPMENT 

(I)  INTERROGATOR  BOX  —  The  interrogator  box  is  a  very  useful  tool  in  troubleshooting  the 
PDP-14.  It  allows  the  troubleshooter  to  see  what  inputs  or  outputs  the  PDP-14  "thinks"  are  on  or  off. 
The  interrogator  box  interrupts  the  normal  program  process  for  one  instruction  and  executes  its  own 
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instruction  to  ask  if  the  selected  input  or  output  is  on  or  off.  In  this  way  it  is  very  similar  to  a  test 
computer. 

(2)  PROXIMITY  SWITCH  TEST  CIRCUIT  —  The  purpose  of  this  circuit  is  to  check  the 
electrical  operation  and  circuitry  of  the  proximity  switches.  The  switch  operates  in  three  modes:  ( 1 ) 
normal;  (2)  actuated;  and  (3)  de-actuated.  In  the  normal  mode  the  switch  responds  to  the  presence  or 
absence  of  a  target  at  its  sensitive  face.  In  the  actuated  mode  the  switch  has  a  voltage  output  regardless 
of  the  presence  or  absence  of  a  target.  The  mode  is  controlled  by  the  switch’s  white  wire  call  BIT  (built 
in  test).  When  the  wire  is  connected  to  the  negative  or  common  line  the  switch  is  in  the  normal  mode. 
When  the  wire  is  left  to  "float,"  that  is  not  connected,  the  switch  is  in  the  actuated  mode.  When  the 
wire  is  connected  to  the  positive  or  supply  line  the  switch  is  in  the  de-actuated  mode.  The  way  the 
wires  are  connected  is  controlled  by  the  test  switch  in  the  logic  controller.  The  switch  has  three  posi¬ 
tions  and  will  simultaneously  test  all  proximity  switches.  The  three  positions  marked  OFF-NORMAL- 
ON  connect  the  BIT  wires  to  the  supply  voltage,  common  voltage  and  no  voltage  respectively.  The  test 
results  are  displayed  by  LEDs  on  the  DC  input  modules  located  in  the  Encoder  Interface  Unit. 

OUTPUTS  FROM  THE  LOGIC  CONTROLLER  (Figure  5-5) 

The  following  outputs  serve  the  operation  of  the  elevator  either  as  control  command  functions  or 
for  system  operational  status.  Some  of  the  outputs  originate  only  from  the  Logic  Controller  during 
NORMAL  operation,  while  the  remaining  outputs  may  originate  from  the  Logic  Controller  during 
NORMAL  mode  and  the  Motor  Controller  during  JOG  mode.  It  is  assumed  that  on  the  Motor  Con¬ 
troller,  the  NORMAL/JOG  switch  is  in  the  NORMAL  Position.  When  the  output  is  originated  from 
either  controller  it  will  be  discussed  below. 

a.  HATCH  SOLENOID  CONTROLS  (Figure  5-5  Sht.  4)  —  These  outputs  originate  only  from 
the  Logic  Controller  and  are  used  to  energize  the  hydraulic  solenoids  that  control  the 
dogging/ undogging,  opening/closing,  latching  and  unlatching  of  the  3rd  Deck  and  Main  Deck  Hatches. 
The  indicators  on  the  A  Output  Box  will  light  when  the  solenoid  is  energized  by  115  VAC  supply 
There  are  12  of  these  indicators  for  the  hatch  solenoid  function  and  no  more  than  one  should  be  lit  at  a 
time.  When  the  Motor  Controller  is  placed  in  the  JOG  mode  the  power  is  removed  from  the  Logic 
Controller,  and  therefore,  no  power  is  available  to  control  the  solenoids. 

b.  HATCH  CLEAR  INDICATOR  (Figure  5-5  Sht.  4)  —  This  output  originates  only  from  the 
Logic  Controller  and  when  energized  will  light  the  Hatch  Clear  indicator  lamp  on  the  Main  Deck 
Recessed  Control  Station. 

c.  HATCH  OPERATION  ALARM  (Figure  5-5  Sht.  4)  —  This  output  energizes  only  from  the 
Logic  Control  and  when  energized  will  supply  power  to  a  bell  warning  device  located  on  the  underside 
of  the  Main  Deck  Hatch.  The  signal  may  be  steady  or  interrupted,  depending  upon  the  operation  tak¬ 
ing  place. 

d.  MASTER  CLOCK  (Figure  5-5  Sht.  4)  —  This  output  is  returned  to  the  control  unit  via  cable 
G782  to  slot  32C.  It  is  used  internally  in  the  PDP-14. 

e.  HATCH  FAILURE  INDICATOR  (Figure  5-5  Sht.  4)  —  This  output  originates  only  from  the 
Logic  Controller  and  when  energized  will  light  the  Hatch  Failure  indicator  lamp  on  the  2nd  Deck  Mas¬ 
ter  Control  Station. 

f.  AT  STATION  INDICATORS  (Figure  S-5  Sht.  4)  —  These  outputs  originate  only  at  the  Logic 
Controller,  and  when  energized  indicate  the  location  of  platform  by  lighting  lamps  on  the  Logic  Con¬ 
troller  and  the  Master  Control  Station.  The  indicators  are  Main  Deck,  Hatch  Sequence,  2nd  Deck,  4th 
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Deck,  1st  Platform  and  2nd  Platform.  The  output  signal  will  be  steady  or  interrupted  depending  upon 
the  platform  status. 

g.  INDICATOR  LIGHT  FLASHER  (Figure  5-5  Sht.  4)  -  This  output  is  returned  to  the  Out¬ 
put  Box  B  as  an  AC  input  for  the  At  Station  indicators  (paragraph  5-19f).  The  output  is  either  steady 
or  interrupted,  depending  upon  the  position  and  status  of  the  elevator  platform. 

h.  RETRACT/EXTEND  LOCKBARS  (Figure  5-5  Sht.  4)  —  These  outputs  both  originate  from 
the  Logic  Controller,  however,  when  the  Motor  Controller  is  in  JOG  mode  RETRACT  LOCKBARS 
may  take  place  by  pushing  the  RETRACT  LOCKBARS  push  button  on  the  Motor  Controller  (Figure 
5-5  Sht.  2).  The  output  signal  is  115  VAC  which  is  used  to  energize  the  pneumatic  solenoid  valves  for 
platform  locking  bars. 

i.  INDICATOR  LIGHT  ENABLE  (Figure  5-5  Sht.  4)  —  This  output  may  originate  in  the  Logic 
Controller  in  the  NORMAL  mode,  and  from  the  Motor  Controller  in  the  JOG  mode.  The  output  sig¬ 
nal  (115  VAC)  is  routed  through  the  NORMAL/JOG  switch,  BY35  to  Y35,  (Figure  5-5  Sht.  2),  then 
through  CAR  HERE  indicators  and  Deck  Level  indicator  switches  (Figure  5-5  Sht.  3),  in  the  JOG 
mode  115  VAC  is  supplied  through  one  side  of  the  primary  supply  line  to  Y35,  then  the  same  route  as 
above. 

j.  LEVELING  FAILURE  INDICATOR  (Figure  5-5  Sht.  4)  —  This  output  originates  only  from 
the  Logic  Controller  and  when  energized  will  light  the  Leveling  Failure  indicator  lamp  on  the  2nd  Deck 
Master  Control  Station. 

k.  ENCODER  ERROR  INDICATOR  (Figure  5-5  Sht.  4)  —  This  output  originates  only  from 
the  Logic  Controller  and  when  energized  will  light  the  Encoder  Error  Indicator  lamp  on  the  2nd  Deck 
Master  Control  Station. 

l.  AUX  RELAY  OUTPUTS  (Figure  5-5  Sht.  5)  —  These  outputs  may  originate  in  the  Logic 
Controller  in  the  NORMAL  mode,  or  the  Motor  Controller  in  the  JOG  mode.  There  are  four  Aux 
Relay  outputs  on  the  Output  Box  C,  which  when  energized  provide  115  VAC  to  intermediate  relays 
which  in  turn  provide  115  VAC  to  the  UP,  DOWN,  HIGH  SPEED  and  LOW  SPEED  contactors  in  the 
Motor  Controller  (Figure  5-5  Sht.  2).  When  using  the  JOG  mode,  the  115  VAC  signal  is  provided 
directly  to  the  Motor  Contactors  using  the  JOG  UP  and  JOG  DOWN  pushbuttons.  In  JOG  mode,  only 
the  LOW  SPEED  contactor  is  used. 
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Appendix  H 

CONTROL  AND  CONTROL  SYSTEMS  MANUFACTURERS 


Allis-Chalmers 

B  and  B  Electromatic  Corporation 

Bunker-Ramo 

Cutler  Hammer 

Digital  Equipment  Corporation 

Dover  Corporation  Elevator  Division 

Electronics  Corporation  of  America 

Gems  Division  DeLaval  Turbine 

General  Electric 

Honeywell,  Inc. 

Link-Belt 

Otis 

Square  "D"  Company 
Unidynamics 
US  Elevator 
Wavco 

Webb  Jervis  B.  Company 


Westinghouse  Electric  Corporation 


Appendix  I 

SENSOR  AND  SENSOR  COMPONENT  MANUFACTURERS 

ASCO 
Autron,  Inc. 

Banner 

Clairex  Electronics 
Conveyer  Systems,  Inc. 

Cutler  Hammer 
Eldec 

Electro  Corporation 

Electronic  Counters  and  Controls,  Inc. 

Ferranti 

General  Equipment  and  Manufacturing  Company 

Gordon  Engineering  Corporation 

Hyde  Park  Electronics 

International  Rectifier 

Magnetics.  Inc.  Industrial  Division 

Microswitch 

Midland-Ross  Corporation  Electric  Products  Division 

NAMCO  Controls 

National  Sonics  Corporation 

OMRON 

Otis 

PECO  Corporation 

R  Sl  S  Industrial  Control  Devices  Electrical  Products  Division 

RCA 

Sentrol 

Singer  Company 

Skan-A-Matic  Corporation 

Spectronics  Division  of  Honeywell 

Sperry 

Sprague 

Square  "D" 

Texas  Instruments 

United  Power  and  Control  Systems,  Inc. 

Vactec 

Ward  Leonard  Electric  Company 
Webb  Jervis  B.  Company 
Xercon,  Inc. 
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